Vulnerabilities

TI-2023-18787 CVE-2023-37117 · GHSA-hvvx-qx2r-4h8q

A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP.

MEDIUM 50

A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0087 Published 2024-01-12 No fix listed CWE-416

TI-2021-18212 CVE-2021-41396 · GHSA-vjgm-3mww-8qmf

LOW 36

Live555 through 1.08 does not handle socket connections properly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01374 Published 2022-07-11 No fix listed CWE-787

TI-2021-16660 CVE-2021-39282 · GHSA-3x73-wm98-jh2g

LOW 36

Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01532 Published 2021-08-18 No fix listed CWE-401

TI-2021-16661 CVE-2021-39283 · GHSA-w9wx-4fjg-83vq

LOW 26

liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00865 Published 2021-08-18 No fix listed CWE-617

TI-2021-15984 CVE-2021-38380 · GHSA-3vvx-rwp5-c7c5

LOW 36

Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01532 Published 2021-08-10 No fix listed CWE-125

TI-2021-15985 CVE-2021-38381 · GHSA-8374-7847-gp4w

LOW 31

Live555 through 1.08 does not handle MPEG-1 or 2 files properly.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0119 Published 2021-08-10 No fix listed CWE-416

TI-2021-15986 CVE-2021-38382 · GHSA-3v3m-cp4r-m942

LOW 31

Live555 through 1.08 does not handle Matroska and Ogg files properly.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0119 Published 2021-08-10 No fix listed CWE-416