Critical severity9.8NVD Advisory· Published Aug 20, 2019· Updated Jun 17, 2026

CVE-2019-15232

Description

Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and Matroska file demultiplexors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Live555/Streaming Media
cpe:2.3:a:live555:streaming_media:*:*:*:*:*:*:*:*
Range: <2019-08-16
Live555/Live555description
Live555/liveMediallm-fuzzy
Range: <2019.08.16
Live555/Live555llm-fuzzy
Range: <2019.08.16
osv-coords2 versions
pkg:rpm/opensuse/live555&distro=openSUSE%20Leap%2015.2 pkg:rpm/suse/live555&distro=SUSE%20Package%20Hub%2015%20SP2
< 2021.05.22-lp152.3.6.1+ 1 more
- (no CPE)range: < 2021.05.22-lp152.3.6.1
- (no CPE)range: < 2021.05.22-bp152.4.4.1

Patches

Vulnerability mechanics

References

www.live555.com/liveMedia/public/changelog.txtnvdRelease NotesVendor Advisory
security.gentoo.org/glsa/202005-06nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000