Live555 vulnerabilities
Published CVEs affecting Live555 products: 5 record(s), with severity, exploitation and fixes.
CVE-2025-65407
Medium · 6.5
CWE-416 Dec 1, 2025
Use After Free in Live555 Streaming Media
A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG Program stream.
CVE-2025-65408
Medium · 6.5
CWE-476 Dec 1, 2025
NULL Pointer Dereference in Live555 Streaming Media
A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a crafted ADTS file.
CVE-2025-65406
Medium · 6.5
CWE-122 Dec 1, 2025
Heap-based Buffer Overflow in Live555 Streaming Media
A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MKV file.
CVE-2025-65405
Medium · 6.5
CWE-416 Dec 1, 2025
Use After Free in Live555 Streaming Media
A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a crafted ADTS/AAC file.
CVE-2025-65404
Medium · 6.5
CWE-120 Dec 1, 2025
Classic Buffer Overflow in Live555 Streaming Media
A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via a crafted MP3 stream.