A use-after-free in the SocketDescriptor::tcpReadHandler1 function (liveMedia/RTPInterface.cpp) of LIVE555 Streaming Media (version 2026.02.26) allows attackers to cause a Denial of Service (DoS) via sending a series of crafted RTSP and HTTP requests to the server.
CVE-2026-38998
NONE
EPSS 0.15%
Updated Sep 09, 2026
N/A
n/a:n/a
CVE Details
CVE ID
CVE-2026-38998
Published Date
Sep 09, 2026
Vendor
N/A
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.15%
Likelihood of exploitation in next 30 days
Percentile:
4.9th percentile (higher than 4.9% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory