Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-60458 — UxPlay version 1.72 contains a double free vulnerability in its RTSP request handling logic. | Kitploit
Tools/GitHubGitHub/0pepsi/cve-2025-60458
Vulnerability AnalysisExploitationFuzzingBinary Analysis
GitHub0pepsi/cve-2025-60458

CVE-2025-60458

UxPlay version 1.72 contains a double free vulnerability in its RTSP request handling logic.

View Repository
189 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-60458

UxPlay 1.72 RTSP TEARDOWN Double Free Vulnerability

Description

UxPlay version 1.72 contains a double free vulnerability in its RTSP request handling logic. A remote attacker can trigger multiple calls to free() on the same heap memory object by sending a specially crafted RTSP TEARDOWN request.

This flaw results from improper memory lifecycle management during RTSP session cleanup. When triggered, the vulnerability can cause heap corruption, leading to a denial of service (application crash).

Vulnerability Type

  • Double Free

Affected Product

  • UxPlay version 1.72

Affected Component

  • RTSP request handling / session teardown logic

Attack Vector

  • Remote
  • Triggerable via a crafted RTSP request over the network

Impact

  • Denial Of Service

Severity

  • CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
  • Base Score: 6.5 (Medium)

Discoverer

  • Jbr Alotaibi
Download Tool