Approved changes feed: RSS · Atom

cpe:2.3:a:live555:live555:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLive555 (0ca053ca-7078-53ad-984c-3102ed26e64e)
ProductLive555 (bcafbc7d-627d-5bcf-9c7f-2f36973f5701)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/vimagick/live555 purl2cpe 2026-06-01 10:12:34.519028
pkg:github/che0/live555 purl2cpe 2026-06-01 10:12:34.519030
pkg:github/rgaufman/live555 purl2cpe 2026-06-01 10:12:34.519031
pkg:rpm/opensuse/live555 purl2cpe 2026-06-01 10:12:34.519033

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-41396 vulnerable 2026-06-08 05:35:20.497337 Details available
Live555 through 1.08 does not handle socket connections properly. A huge number of incoming socket connections in a short time invokes the error-handling module, in which a heap-based buffer overflow happens. An attacker can leverage this to launch a DoS attack.
Published: 2022-07-11T11:38:05.000Z
Updated: 2024-08-04T03:08:32.468Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39283 vulnerable 2026-06-08 05:33:49.364698 Details available
liveMedia/FramedSource.cpp in Live555 through 1.08 allows an assertion failure and application exit via multiple SETUP and PLAY commands.
Published: 2021-08-18T16:58:53.000Z
Updated: 2024-08-04T02:06:41.522Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39282 vulnerable 2026-06-08 05:33:49.364300 Details available
Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files.
Published: 2021-08-18T16:59:05.000Z
Updated: 2024-08-04T02:06:41.529Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38382 vulnerable 2026-06-08 05:32:55.989818 Details available
Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash.
Published: 2021-08-10T17:15:59.000Z
Updated: 2024-08-04T01:37:16.647Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38381 vulnerable 2026-06-08 05:32:55.989405 Details available
Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash.
Published: 2021-08-10T17:16:11.000Z
Updated: 2024-08-04T01:37:16.543Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38380 vulnerable 2026-06-08 05:32:55.988887 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.