LI
Vendor
Live555
24
CVEs
0
On KEV
0
New 30D
Products
SM9.8
Streaming Media
Live555
13 CVEs0 on KEV0 new
LI9.8
Live555
Live555
7 CVEs0 on KEV0 new
LM9.8
Live555 Media Server
Live555
2 CVEs0 on KEV0 new
LI9.8
Liblivemedia
Live555
1 CVEs0 on KEV0 new
MS–
Media Server
Live555
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-65406 | SM Streaming Media Live555 | 6.5 | Dec 1 | A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via… |
| CVE-2025-65407 | SM Streaming Media Live555 | 6.5 | Dec 1 | A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a… |
| CVE-2025-65408 | SM Streaming Media Live555 | 6.5 | Dec 1 | A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of… |
| CVE-2025-65405 | SM Streaming Media Live555 | 6.5 | Dec 1 | A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying… |
| CVE-2025-65404 | SM Streaming Media Live555 | 6.5 | Dec 1 | A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via a crafted MP3 stream |
| CVE-2023-37117 | LI Live555 Live555 | 9.8 | Jan 12 | A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP |
| CVE-2021-41396 | LI Live555 Live555 | 7.5 | Jul 12 | Live555 through 1.08 does not handle socket connections properly |
| CVE-2021-39283 | LI Live555 Live555 | 5.5 | Aug 18 | liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands |
| CVE-2021-39282 | LI Live555 Live555 | 7.5 | Aug 18 | Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files |
| CVE-2021-38382 | LI Live555 Live555 | 6.5 | Aug 10 | Live555 through 1.08 does not handle Matroska and Ogg files properly |
| CVE-2021-38381 | LI Live555 Live555 | 6.5 | Aug 10 | Live555 through 1.08 does not handle MPEG-1 or 2 files properly |
| CVE-2021-38380 | LI Live555 Live555 | 7.5 | Aug 10 | Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read |
| CVE-2021-28899 | SM Streaming Media Live555 | 7.5 | Apr 29 | Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses in… |
| CVE-2020-24027 | LI Liblivemedia Live555 | 9.8 | Jan 11 | In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP "PLAY" command, when the command specifies seeking… |
| CVE-2019-15232 | SM Streaming Media Live555 | 9.8 | Aug 20 | Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled… |
| CVE-2019-9215 | SM Streaming Media Live555 | 9.8 | Feb 28 | In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function |
| CVE-2019-7732 | SM Streaming Media Live555 | 7.5 | Feb 11 | In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, uri, or response),… |
| CVE-2019-7733 | SM Streaming Media Live555 | 7.5 | Feb 11 | In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBytes has an unrestricted memmove |
| CVE-2019-7314 | SM Streaming Media Live555 | 9.8 | Feb 4 | liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that… |
| CVE-2019-6256 | LM Live555 Media Server Live555 | 9.8 | Jan 14 | A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93 |
| CVE-2018-4013 | LM Live555 Media Server Live555 | 9.8 | Oct 19 | An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92 |
| CVE-2013-6934 | SM Streaming Media Live555 | – | Jan 23 | The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service… |
| CVE-2013-6933 | SM Streaming Media Live555 | – | Jan 23 | The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause… |
| CVE-2007-6036 | MS Media Server Live555 | – | Nov 20 | The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a denial of service (daemon crash) via a short RTSP query,… |