CVE-2021-38382: LIVE555

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash.

Affected products

• LIVE555 LIVE555: before 2021.08.06 (fixed in 2021.08.06)

Published 2021-08-10. Last modified 2026-06-17.