What is GHSA-f8rc-m549-vxmc?

GHSA-f8rc-m549-vxmc is a security advisory published by GitHub Security Advisories with Medium severity. A use-after-free in the SocketDescriptor::tcpReadHandler1 function (liveMedia/RTPInterface.cpp)...

Which CVE IDs does GHSA-f8rc-m549-vxmc cover?

GHSA-f8rc-m549-vxmc covers the following CVE IDs: CVE-2026-38998. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f8rc-m549-vxmc?

GHSA-f8rc-m549-vxmc has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-f8rc-m549-vxmcMediumCVSS 6.5

A use-after-free in the SocketDescriptor::tcpReadHandler1 function (liveMedia/RTPInterface.cpp)...

Vendor

GitHub Security Advisories

Published

September 9, 2026

Last Modified

September 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-38998 →

📋 Description

A use-after-free in the SocketDescriptor::tcpReadHandler1 function (liveMedia/RTPInterface.cpp) of LIVE555 Streaming Media (version 2026.02.26) allows attackers to cause a Denial of Service (DoS) via sending a series of crafted RTSP and HTTP requests to the server.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-38998
https://download.live555.com/changelog.txt
https://github.com/archersec/security-advisories/blob/master/live555/live555-advisory-2026.md
http://lists.live555.com/pipermail/live-devel/2026-March/022789.html
https://github.com/advisories/GHSA-f8rc-m549-vxmc