Skip to content
Noroxi

live555 records

24 published records for vendor live555.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
66.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 21
  4. 22
  5. 24
  6. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

24 records
  • CVE-2018-4013
    42Plan

    An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server library version 0.92.

    CriticalCVSS 9.8Proof of conceptEPSS 9%

    live555 · live555 media serverOct 19, 2018

  • CVE-2019-7314
    40Plan

    liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could

    CriticalCVSS 9.8No exploitEPSS 3%

    live555 · streaming mediaFeb 3, 2019

  • CVE-2019-6256
    40Plan

    A Denial of Service issue was discovered in the LIVE555 Streaming Media libraries as used in Live555 Media Server 0.93.

    CriticalCVSS 9.8No exploitEPSS 2%

    live555 · live555 media serverJan 14, 2019

  • CVE-2019-9215
    40Plan

    In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function.

    CriticalCVSS 9.8No exploitEPSS 2%

    live555 · streaming mediaFeb 28, 2019

  • CVE-2019-15232
    40Plan

    Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session

    CriticalCVSS 9.8No exploitEPSS 1%

    live555 · streaming mediaAug 19, 2019

  • CVE-2020-24027
    39Monitor

    In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP "PLAY" comm

    CriticalCVSS 9.8No exploitEPSS 1%

    live555 · liblivemediaJan 11, 2021

  • CVE-2023-37117
    39Monitor

    A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP.

    CriticalCVSS 9.8No exploitEPSS 0%

    live555 · live555Jan 12, 2024

  • CVE-2013-6934
    38Monitor

    The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote

    HighCVSS 7.5No exploitEPSS 28%

    live555 · streaming mediaJan 23, 2014

  • CVE-2013-6933
    35Monitor

    The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Pl

    HighCVSS 7.5No exploitEPSS 17%

    live555 · streaming mediaJan 23, 2014

  • CVE-2019-7733
    30Monitor

    In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBytes has an unrestrict

    HighCVSS 7.5No exploitEPSS 1%

    live555 · streaming mediaFeb 11, 2019

  • CVE-2021-39282
    30Monitor

    Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files.

    HighCVSS 7.5No exploitEPSS 1%

    live555 · live555Aug 18, 2021

  • CVE-2021-38380
    30Monitor

    Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read.

    HighCVSS 7.5No exploitEPSS 1%

    live555 · live555Aug 10, 2021

  • CVE-2019-7732
    30Monitor

    In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (usernam

    HighCVSS 7.5No exploitEPSS 1%

    live555 · streaming mediaFeb 11, 2019

  • CVE-2021-41396
    30Monitor

    Live555 through 1.08 does not handle socket connections properly.

    HighCVSS 7.5No exploitEPSS 1%

    live555 · live555Jul 12, 2022

  • CVE-2021-28899
    30Monitor

    Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDema

    HighCVSS 7.5No exploitEPSS 1%

    live555 · streaming mediaApr 29, 2021

  • CVE-2007-6036
    29Monitor

    The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a denial of service (dae

    HighCVSS 7.1Proof of conceptEPSS 4%

    live555 · media serverNov 20, 2007

  • CVE-2021-38382
    26Monitor

    Live555 through 1.08 does not handle Matroska and Ogg files properly.

    MediumCVSS 6.5No exploitEPSS 1%

    live555 · live555Aug 10, 2021

  • CVE-2021-38381
    26Monitor

    Live555 through 1.08 does not handle MPEG-1 or 2 files properly.

    MediumCVSS 6.5No exploitEPSS 1%

    live555 · live555Aug 10, 2021

  • CVE-2025-65406
    26Monitor

    A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause

    MediumCVSS 6.5No exploitEPSS 0%

    live555 · streaming mediaDec 1, 2025

  • CVE-2025-65404
    26Monitor

    A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS)

    MediumCVSS 6.5No exploitEPSS 0%

    live555 · streaming mediaDec 1, 2025

  • CVE-2025-65408
    26Monitor

    A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018.09.02 all

    MediumCVSS 6.5No exploitEPSS 0%

    live555 · streaming mediaDec 1, 2025

  • CVE-2025-65405
    26Monitor

    A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a

    MediumCVSS 6.5No exploitEPSS 0%

    live555 · streaming mediaDec 1, 2025

  • CVE-2025-65407
    26Monitor

    A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Den

    MediumCVSS 6.5No exploitEPSS 0%

    live555 · streaming mediaDec 1, 2025

  • CVE-2021-39283
    22Monitor

    liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands.

    MediumCVSS 5.5No exploitEPSS 0%

    live555 · live555Aug 18, 2021