Priority HIGH 73
Moonlight-common-c contains the core GameStream client code shared between Moonlight clients.
moonlight-stream
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
moonlight-stream records in CISA KEVNo moonlight-stream vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2023-22890 CVE-2023-42799
Buffer overflow due to use of `strcpy` in `parseUrlAddrFromRtspUrlString`
Priority HIGH 73
Moonlight-common-c contains the core GameStream client code shared between Moonlight clients.
TI-2020-08898 CVE-2020-11024
Man-in-the-middle attack in Moonlight iOS/tvOS
Priority LOW 37
In Moonlight iOS/tvOS before 4.0.1, the pairing process is vulnerable to a man-in-the-middle attack.
TI-2023-22892 CVE-2023-42801
Stack buffer overflow due to `strcpy` into fixed size buffer in `extractVersionQuadFromString`
Priority LOW 35
Moonlight-common-c contains the core GameStream client code shared between Moonlight clients.
TI-2026-71333 CVE-2026-41210
Moonlight Qt heap buffer overflow via crafted H.264 SPS seq_parameter_set_id
Priority LOW 29
Moonlight Qt is a GameStream client for Windows, macOS, Linux, and Steam Link.