VULNERABILITY INTELLIGENCE

CVE-2021-38380

CVSS score7.5 HIGH

EPSS probability1.53%

CISA KEVNot currently listed

Published2021-08-10

Last modified2026-06-17

Description

Live555 through 1.08 mishandles huge requests for the same MP3 stream, leading to recursion and s stack-based buffer over-read. An attacker can leverage this to launch a DoS attack.