{"action":"Upgrade liblivemedia to 2019.10.11-2 or later.","affected":[{"fixed":"2019.10.11-2","introduced":"0"}],"component":"liblivemedia","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["2019.10.11-2"],"id":"tcs_01M5NDXRY6RRNJHSQBBD0PTSXD","modified_at":"2026-10-05T04:00:03.982132595Z","published_at":"2019-08-20T00:15:10.237Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2019-15232","https://security-tracker.debian.org/tracker/CVE-2019-15232"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2019-15232","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2019-15232"}],"summary":"Live555 before 2019.08.16 has a Use-After-Free because GenericMediaServer::createNewClientSessionWithId can generate the same client session ID in succession, which is mishandled by the MPEG1or2 and M"}