The vulnerability of the USB-Audio component in the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of the USB-Audio component in the Linux operating system’s kernel is related to writing beyond the allocated memory buffer in the convertchmap function. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2024-6776

Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2024-5845

Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: Medium...

PUB-A-329067188

In multiple locations, there is a possible way to use a paired Bluetooth LE audio device to achieve code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from memory corruption in audio when the START command on the host voice PCM is called multiple times for the same RX or TX tap point...

The vulnerability of the Web Audio component in Microsoft Edge and Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the Web Audio component in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2023-33120 Use After Free in Audio

Memory corruption in Audio when memory map command is executed consecutively in ADSP...

CVE-2023-33117 Use After Free in Audio

Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCSLOADMODULE command...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption in audio when calling IOCTL from user space...

CVE-2023-33074 Use After Free in Audio

Memory corruption in Audio when SSR event is triggered after music playback is stopped...

CVE-2023-21368

In Audio, there is a possible out of bounds read due to missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-18143 · Audio · Audio

Name of the Vulnerable Software and Affected Versions: Audio affected versions not specified Description: The issue is related to a possible out of bounds read in Audio due to a missing bounds check. This could lead to local information disclosure without requiring additional execution privileges...

CVE-2022-40534 Improper Validation of Array Index in Audio

Memory corruption due to improper validation of array index in Audio...

The vulnerability of the Audio component in the Google Chrome browser allows a hacker to bypass existing security restrictions.

The vulnerability of the Google Chrome browser’s Extensions API relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions through a specially created HTML page...

Qualcomm Chipsets Buffer Error Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets contain a security vulnerability that originates from a transient DOS in the audio when the channel buffers are remapped in the media codec decoding...

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption issue in Audio when using memory passed by the HIDL client for the svamodelserializer...

CVE-2023-20670

In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07648710; Issue ID: ALPS07648710...

SUSE CVE-2022-4179

Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: High...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome versions prior to 108.0.5359.71 suffer from a security vulnerability in the use of Audio after release, which can be exploited by an attacker to launch an attack via a specially crafted Chrome Extension exploiting heap...

CVE-2022-32614

In audio, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310571; Issue ID: ALPS07310571...