181 matches found
thunderbird: firefox: Sandbox escape due to invalid pointer in the Audio/Video: GMP component
A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker is able to perform memory corruption in the GMP process which process encrypted media. This process is also heavily sandboxed, but represents slightly different...
CVE-2023-20785
In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628524; Issue ID: ALPS07628524...
CVE-2023-21655
Memory corruption in Audio while validating and mapping metadata...
Gradio Vulnerable to Arbitrary File Deletion
A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. This vulnerability allows an attacker to control the format of the audio file, leading to arbitrary file content deletion. By manipulating the output format, an attacker can reset...
Arbitrary File Write via Archive Extraction (Zip Slip)
Overview gradio is a Python library for easily interacting with trained machine learning models Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip via the Audio component. An attacker can delete arbitrary file content by manipulating the outpu...
CVE-2024-10648
A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. This vulnerability allows an attacker to control the format of the audio file, leading to arbitrary file content deletion. By manipulating the output format, an attacker can reset...
CVE-2024-10648
CVE-2024-10648 describes a path traversal vulnerability in the Gradio Audio component of gradio-app/gradio, present in version git 98cbcae. The underlying issue allows an attacker to control the audio file format and delete arbitrary file content by manipulating the output format, potentially res...
CVE-2024-10648 Path Traversal in gradio-app/gradio
A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. This vulnerability allows an attacker to control the format of the audio file, leading to arbitrary file content deletion. By manipulating the output format, an attacker can reset...
CVE-2024-10648 Path Traversal in gradio-app/gradio
A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. This vulnerability allows an attacker to control the format of the audio file, leading to arbitrary file content deletion. By manipulating the output format, an attacker can reset...
Gradio 安全漏洞
Gradio is an open source Python library from Gradio Open Source, a method for demonstrating machine learning models through a friendly web interface. A security vulnerability exists in Gradio version 98cbcae, which stems from a path traversal vulnerability in the Gradio Audio component, which...
Elevation of Privilege Vulnerability in Multiple Apple Products (CNVD-2025-19516)
Apple macOS Sequoia is an operating system from Apple in the U.S. Apple macOS Ventura is a desktop operating system from Apple in the U.S. Apple macOS Sonoma is an operating system from Apple. An elevation of privilege vulnerability exists in multiple Apple products and is caused due to a logic...
The vulnerability of the Audio component in Google Chrome and Microsoft Edge browsers allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.
The vulnerability of the Audio component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, execute arbitrary code, or cause a service...
The vulnerability of the Audio component in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.
The vulnerability of the Audio component in Microsoft Edge and Google Chrome lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to expose sensitive information through specially created PDF files...
PT-2024-4244 · Google +6 · Google Chrome +6
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 126.0.6478.54 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in the Audio component, which could allow a remote attacker to exploit heap corruption via a...
PT-2024-12391 · Qualcomm · 205 Mobile Firmware +282
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the Audio component while processing the RT proxy port register driver. No information is provided about the...
PT-2024-12389 · Unknown · Asm Driver
Name of the Vulnerable Software and Affected Versions: ASM driver affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the Audio component when the callback function of the ASM driver is invoked. This can potentially cause disruptions in audio...
PT-2024-12394 · Qualcomm · 9206 Lte Modem Firmware +106
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the Audio component when processing calibration data returned from the ACDB loader. No information is provided...
PT-2024-12393 · Audio · Audio
Name of the Vulnerable Software and Affected Versions: Audio affected versions not specified Description: The issue is related to memory corruption in the Audio component when processing IIR config data from the AFE calibration block. Recommendations: At the moment, there is no information about ...
OpenHarmony Resource Management Error Vulnerability
OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony version v3.2.2 and earlier versions, which originates from the reuse of a multimedia audio component pointer after...
PT-2024-12421 · Adsp · Adsp
Name of the Vulnerable Software and Affected Versions: ADSP affected versions not specified Description: The issue is related to memory corruption in the Audio component of ADSP when a memory map command is executed consecutively. Recommendations: At the moment, there is no information about a...