CVE-2025-60458

Medium · 6.5

CVSS

6.5

EPSS

0.3%

Published

Dec 29, 2025

CISA due date

—

The record

UxPlay 1.72 contains a double free vulnerability in its RTSP request handling. A specially crafted RTSP TEARDOWN request can trigger multiple calls to free() on the same memory address, potentially causing a Denial of Service.

Affected packages

Ecosystem	Package	Introduced	Fixed