CVE-2021-38380

Name of the Vulnerable Software and Affected Versions Live555 versions 1.08 and earlier

Description The issue arises from mishandling huge requests for the same MP3 stream, leading to recursion and a stack-based buffer over-read. An attacker can leverage this to launch a Denial of Service (DoS) attack.

Recommendations For versions 1.08 and earlier, update to a version that fixes the handling of huge requests for the same MP3 stream to prevent recursion and stack-based buffer over-read. At the moment, there is no information about a newer version that contains a fix for this vulnerability.