CVE-2023-37117

Summary

CVE-2023-37117 is a newly discovered vulnerability affecting live555 version 2023.05.10. This issue involves a heap-use-after-free condition, which can be exploited by malicious actors to execute arbitrary code or cause application crashes. During the handling of the SETUP process, memory that is no longer in use is not properly managed, leading to this vulnerability. Successful exploitation can result in significant security risks, including data theft or system compromise. Users are strongly advised to update to the latest version of live555 as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.