CVE-2025-60458
MEDIUM 6.5EPSS 0.3%
UxPlay 1.72 contains a double free vulnerability in its RTSP request handling. A specially crafted RTSP TEARDOWN request can trigger multiple calls to free() on the same memory address, potentially causing a Denial of Service.
- CVSS v3.1 CNA
- 6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - EPSS
- 0.31% chance of exploitation in the next 30 days, 22nd percentile
- Published
- 2025-12-29
Proof-of-concept exploits (1)
- 0pepsi/CVE-2025-604580★ · 2025-12-30