Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9
Exploited now
Live555 records in CISA KEVNo Live555 vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 50
A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0087 · Published 2024-01-12 · No fix listed CWE-416
Priority LOW 36
Live555 through 1.08 does not handle socket connections properly.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01374 · Published 2022-07-11 · No fix listed CWE-787
Priority LOW 36
Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01532 · Published 2021-08-18 · No fix listed CWE-401
Priority LOW 36
Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01532 · Published 2021-08-10 · No fix listed CWE-125
Priority LOW 31
Live555 through 1.08 does not handle Matroska and Ogg files properly.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0119 · Published 2021-08-10 · No fix listed CWE-416
Priority LOW 31
Live555 through 1.08 does not handle MPEG-1 or 2 files properly.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0119 · Published 2021-08-10 · No fix listed CWE-416
Priority LOW 26
liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00865 · Published 2021-08-18 · No fix listed CWE-617
THREATIST.IORead the docs