Live555 Streaming Media — known CVE vulnerabilities

Every CVE whose affected-product data names Live555 Streaming Media, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2019-7314 — CVSS 9.8 (critical): liblivemedia in Live555 before 2019.02.03 mishandles the termination of an RTSP stream after RTP/RTCP-over-RTSP has been set up, which…
• CVE-2019-9215 — CVSS 9.8 (critical): In Live555 before 2019.02.27, malformed headers lead to invalid memory access in the parseAuthorizationHeader function.
• CVE-2019-15232 — CVSS 9.8 (critical): Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client…
• CVE-2019-7733 — CVSS 7.5 (high): In Live555 0.95, there is a buffer overflow via a large integer in a Content-Length HTTP header because handleRequestBytes has an…
• CVE-2021-28899 — CVSS 7.5 (high): Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive…
• CVE-2013-6933 — CVSS 7.5 (high): The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2011.08.13 through 2013.11.25, as used in VideoLAN VLC Media…
• CVE-2013-6934 — CVSS 7.5 (high): The parseRTSPRequestString function in Live Networks Live555 Streaming Media 2013.11.26, as used in VideoLAN VLC Media Player, allows…
• CVE-2019-7732 — CVSS 7.5 (high): In Live555 0.95, a setup packet can cause a memory leak leading to DoS because, when there are multiple instances of a single field…
• CVE-2025-65404 — CVSS 6.5 (medium): A buffer overflow in the getSideInfo2() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS)…
• CVE-2025-65405 — CVSS 6.5 (medium): A use-after-free in the ADTSAudioFileSource::samplingFrequency() function of Live555 Streaming Media v2018.09.02 allows attackers to cause…
• CVE-2025-65406 — CVSS 6.5 (medium): A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to…
• CVE-2025-65407 — CVSS 6.5 (medium): A use-after-free in the MPEG1or2Demux::newElementaryStream() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a…
• CVE-2025-65408 — CVSS 6.5 (medium): A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink() function of Live555 Streaming Media v2018.09.02…