CVE-2021-38381: LIVE555

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash.

Affected products

• LIVE555 LIVE555: before 2021.08.09 (fixed in 2021.08.09)

Published 2021-08-10. Last modified 2026-06-17.