CVE-2025-65406
Fixed in a distro release EPSS <1%CVSS 6.5
A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber() function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MKV file.
Products: live555 streaming_media
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 14 | liblivemedia | no fix |
| Ubuntu 20.04 LTS | liblivemedia | no fix |
| Ubuntu 26.10 | liblivemedia | no fix |
| Ubuntu Pro 16.04 LTS | liblivemedia | no fix |
| Ubuntu Pro 18.04 LTS | liblivemedia | no fix |
| openSUSE Tumbleweed | live555 | 2026.10.17-1.1 |