27 matches found
CVE-2025-32909 Libsoup: null pointer dereference on libsoup through function "sniff_mp4" in soup-content-sniffer.c
A flaw was found in libsoup. SoupContentSniffer may be vulnerable to a NULL pointer dereference in the sniffmp4 function. The HTTP server may cause the libsoup client to crash...
CVE-2025-32909
CVE-2025-32909 affects libsoup (SoupContentSniffer) with a NULL pointer dereference in sniff_mp4, potentially causing a crash of the libsoup client when parsing HTTP content. Publicly documented advisories note vulnerability across libsoup3 variants and indicate that versions older than fixed rel...
CVE-2024-32909
In handlemsg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2022-32909
CVE-2022-32909 involves Apple iOS where improper cache handling could allow an app to access user‑sensitive data. Affected product: iOS (prior to 16); fix: iOS 16. Impact: data disclosure. CVSSv3.1 (NVD): 5.5 (Medium), Attack Vector: Local, Attack Complexity: Low, Privileges Required: None, User ...
CVE-2022-32909
The issue was addressed with improved handling of caches. This issue is fixed in iOS 16. An app may be able to access user-sensitive data...
About the security content of iOS 16.1 and iPadOS 16
About the security content of iOS 16.1 and iPadOS 16 This document describes the security content of iOS 16.1 and iPadOS 16. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...