15508 matches found
The vulnerability of the audio stream parser of the GPAC multimedia platform, which allows a hacker to cause a service failure.
The vulnerability of the Opus audio stream parser on the GPAC multimedia platform is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...
CVE-2026-79394: Initialization of a Resource with an Insecure Default
An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier ships with authentication disabled, allowing remote unauthenticated attackers to access live H.264 video and G.711 audio fee...
CVE-2026-84122
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...
CVE-2026-87961
ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds read vulnerability in the readID3Header function due to a shadowed length parameter in ID3 synchronized-lyrics processing. Attackers can craft malicious MP3 files or HTTP audio streams with oversized frame size...
CVE-2026-87961
ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds read in the read_ID3_Header function, caused by a shadowed length parameter during ID3 synchronized-lyrics processing. An attacker can craft malicious MP3 files or HTTP audio streams with oversized frame size declarati...
ffmpeg: FFmpeg: Arbitrary code execution via crafted CAF file
A flaw was found in FFmpeg. A remote attacker could exploit a signed integer overflow vulnerability in the MACE6 audio decoder by providing a specially crafted CAF Core Audio Format file. This malicious file manipulates the bytesperpacket value, leading to an undersized memory allocation and a he...
CVE-2026-87961: Out-of-bounds Read
ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds read vulnerability in the readID3Header function due to a shadowed length parameter in ID3 synchronized-lyrics processing. Attackers can craft malicious MP3 files or HTTP audio streams with oversized frame size...
firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Audio/Video: Playback component...
firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Audio/Video: Playback component...
firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Audio/Video: Playback component...
firefox: thunderbird: Same-origin policy bypass in the Audio/Video: Playback component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Audio/Video: Playback component...
ROS-20260909-73-0161
The vulnerability of the Audio component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
CVE-2026-45515
In a2dpvendoropusdecoderdecodepacket of a2dpvendoropusdecoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-70562
Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69859
Time-of-check time-of-use toctou race condition in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69801
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69707
Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69692
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...