72 matches found
EUVD-2019-11983
Malware in sbrugna...
CVE-2025-27030 Buffer Over-read in Audio
information disclosure while invoking calibration data from user space to update firmware size...
CVE-2023-30576
Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker to execute arbitrary code with the privileges of the guacd process...
GStreamer gstreamer-plugins-ugly Security Vulnerability
GStreamer is a set of frameworks for processing streaming media. A security vulnerability exists in GStreamer gstreamer-plugins-ugly that stems from an integer overflow in the SIPR audio buffer...
SUSE-SU-2023:3247-1 Security update for gstreamer-plugins-ugly
This update for gstreamer-plugins-ugly fixes the following issues: - CVE-2023-38103: Fixed an integer overflows when calculating the size of SIPR audio buffers. bsc1213751 - CVE-2023-38104: Fixed an integer overflow when calculation audio packet size . bsc1213750...
PT-2023-22797 · Apache +1 · Apache Guacamole +1
Name of the Vulnerable Software and Affected Versions: Apache Guacamole versions 0.9.10 through 1.5.1 Description: The issue allows an attacker to execute arbitrary code with the privileges of the guacd process, depending on timing, as Apache Guacamole may continue to reference a freed RDP audio...
Apache Guacamole 资源管理错误漏洞
Apache Guacamole is a clientless remote desktop gateway from the Apache USA Foundation. The product supports protocols such as VNC, RDP and SSH. A resource management error vulnerability exists in Apache Guacamole versions 0.9.10 through 1.5.1, which stems from the fact that Apache Guacamole may...
SUSE CVE-2014-1542
Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate...
SUSE CVE-2014-1549
The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not properly allocate Web Audio buffer memory, which allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and...
SUSE CVE-2018-18503
When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatch in some situations. This vulnerability affects Firefox 65...
MediaTek audio 缓冲区错误漏洞
MediaTek audio is an audio component of a chip from China's MediaTek Corporation MediaTek. A security vulnerability exists in the audio module of the MediaTek chips, which is caused by an out-of-scope write due to incorrect boundary checking. This could result in a local privilege escalation that...
Mozilla Firefox Security Advisory (MFSA2014-57) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
Information disclosure
In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...
CVE-2020-0414
In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...
CVE-2020-0414
In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. The vulnerability exists when JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatch in some situations...
oss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position.
...
CVE-2020-14415
osswrite in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position...
