SM
Product
Streaming Media
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 5Low 0
Watch
Add Streaming Media to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-15232 | 9.8 | Aug 20 | Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled… Affected: before 2019-08-16 |
| CVE-2019-9215 | 9.8 | Feb 28 | In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function Affected: before 2019.02.27 |
| CVE-2019-7314 | 9.8 | Feb 4 | liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which could lead to a Use-After-Free error that… Affected: before 0.95 |
| CVE-2021-28899 | 7.5 | Apr 29 | Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses in… Affected: before 2021.3.16 |
| CVE-2019-7732 | 7.5 | Feb 11 | In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field (username, realm, nonce, uri, or response),… Affected: 0.95 |
| CVE-2019-7733 | 7.5 | Feb 11 | In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBytes has an unrestricted memmove Affected: 0.95 |
| CVE-2025-65407 | 6.5 | Dec 1 | A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a… Affected: 2018-09-02 |
| CVE-2025-65408 | 6.5 | Dec 1 | A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of… Affected: 2018-09-02 |
| CVE-2025-65406 | 6.5 | Dec 1 | A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via… Affected: 2018-09-02 |
| CVE-2025-65405 | 6.5 | Dec 1 | A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying… Affected: 2018-09-02 |
| CVE-2025-65404 | 6.5 | Dec 1 | A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via a crafted MP3 stream Affected: 2018-09-02 |
| CVE-2013-6934 | – | Jan 23 | The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows remote attackers to cause a denial of service… Affected: 2013-11-26 |
| CVE-2013-6933 | – | Jan 23 | The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media Player, allows remote attackers to cause… Affected: 2011-08-13; 2011-08-20; 2011-08-22; 2011-09-02; 2011-09-19; 2011-10-05; +34 more |
Showing 13