CVE-2019-15232: LIVE555 Streaming Media

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska file demultiplexors.

Affected products

• LIVE555 Streaming Media: before 2019-08-16 (fixed in 2019-08-16)

Published 2019-08-20. Last modified 2026-06-17.