UxPlay Double Free Vulnerability in RTSP Request Handling

A double free vulnerability has been identified in UxPlay version 1.72, specifically within its RTSP request handling. This vulnerability allows a remote attacker to send a crafted RTSP TEARDOWN request that triggers multiple calls to free() on the same memory address. Such exploitation can lead to heap corruption, causing a denial-of-service condition by crashing the application. Additionally, this vulnerability may be exploitable for arbitrary code execution.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition by crashing the application. However, according to the discoverer, this vulnerability could also be exploited for arbitrary code execution.