24 results · Feed
-
Medium 6.5
A use-after-free in the SocketDescriptor::tcpReadHandler1 function (liveMedia/RTPInterface.cpp) of LIVE555 Streaming Me…
-
Medium 5.9
LIVE555 < 2026.04.22 RTSP Server Authorization Bypass via Session Token
LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from unauthenticated connections. Attackers who obtain a valid Session token can issue PLAY and TEAR…
-
Medium 6.3
Remote code execution via segmentation fault in increasebufferto function
A flaw was found in the rgaufman/live555 fork of live555. A remote attacker could exploit a segmentation fault, in the `increaseBufferTo` function. This vulnerability can lead to memory corruption problems and potentially other consequences.
-
Medium 6.5
A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming …
-
Medium 6.5
A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows att…
-
Medium 6.5
A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allo…
-
Medium 6.5
A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Den…
-
Medium 6.5
A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows…
-
Critical 9.8
A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP.
-
Unscored —
Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a sho…
-
Unscored —
Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files.
-
Unscored —
liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP …
-
Unscored —
Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer ov…
-
Unscored —
Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP SETUP commands for the sam…
-
Unscored —
Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for th…
-
Unscored —
Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMedia…
-
Unscored —
In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling …
-
Unscored —
Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate th…
-
Unscored —
In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function.
-
Unscored —
In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBy…
-
Unscored —
In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a …
-
Unscored —
liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has bee…
-
Unscored —
A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93.…
-
Critical 10.0CVE-2018-4013 Public exploit
An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server …