14735 matches found
Unspecified Vulnerability in FFmpeg (CNVD-2025-01686)
FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in FFmpeg version n6.1.1, which can be exploited by attackers to cause undefined behavior or a crash during decoding...
Audio Multimodality: Expanding AI Interaction with Spring AI and OpenAI
This blog post is co-authored by our great contributor Thomas Vitale. OpenAI provides specialized models for speech-to-text and text-to-speech conversion, recognized for their performance and cost-efficiency. Spring AI integrates these capabilities via Voice-to-Text and Text-to-Speech TTS. The ne...
Cisco Small Business SPA300 and SPA500 Series IP Phones Unauthenticated Remote Dial (CVE-2015-0670)
The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482. This plugin only works with...
PT-2025-8834
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where the topology might not create the right number of DAI widgets for aggregated amps, leading to a NULL pointer deference. This occurs...
CVE-2024-33039 Untrusted Pointer Dereference in Audio
Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service...
Google Android 安全漏洞
Google Android is a Linux-based open-source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that originates from the presence of uninitialized data in BnAudioPolicyService::onTransact in the IAudioPolicyService.cpp file, which could lead ...
webkit: malicious website may exfiltrate audio data cross-origin
A vulnerability was found in WebKit, where a remote attacker is able to exfiltrate audio data cross-origin by convincing a victim to visit a specially crafted website, which results in obtaining sensitive information...
USN-7092-2: mpg123 vulnerability
USN-7092-1 fixed a vulnerability in mpg123. Bastien Roucariès discovered that the fix was incomplete on Ubuntu 20.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that mpg123 incorrectly handled certain mp3 files. If a user or...
Unbreakable Enterprise kernel security update
4.1.12-124.92.3 - memcgwriteeventcontrol: fix a user-triggerable oops Al Viro Orabug: 37070674 CVE-2024-45021 - ocfs2: fix races between hole punching and AIO+DIO Su Yue Orabug: 36835819 CVE-2024-40943 4.1.12-124.92.2 - fbdev: savage: Handle err return when savagefbcheckvar failed Cai Xinchen...
CVE-2017-18307
Information disclosure possible while audio playback...
CVE-2017-18307 Information Exposure in Kernel
Information disclosure possible while audio playback...
CVE-2017-18307 Information Exposure in Kernel
Information disclosure possible while audio playback...
PT-2024-10597 · Qualcomm · Snapdragon +6
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: Information disclosure is possible during audio playback. This issue may allow the disclosure of information while audio is being played. Recommendations: At the moment, there is no...
CVE-2024-8272 macOS Universal Audio (UAConnect) <= 2.7.0 - Local Privilege Escalation
The com.uaudio.bsd.helper service, responsible for handling privileged operations, fails to implement critical client validation during XPC inter-process communication IPC. Specifically, the service does not verify the code requirements, entitlements, or security flags of any client attempting to...
CVE-2024-8272
CVE-2024-8272 affects macOS Universal Audio (UAConnect) and targets the com.uaudio.bsd.helper service. The issue is a missing validation of clients during XPC IPC: the service does not verify code requirements, entitlements, or security flags of connecting clients, enabling unauthorized clients t...
VulnCheck KEV: CVE-2024-53150
Linux Kernel contains an out-of-bounds read vulnerability in the USB-audio driver that allows a local, privileged attacker to obtain potentially sensitive information...
Astra Linux – Vulnerability in Chromium
The use of after-free in Audio in Google Chrome before version 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
PulseAudio 安全漏洞
PulseAudio is an open source audio system from PulseAudio for POSIX OS. The system is primarily used for audio transmission, among other things. A security vulnerability exists in PulseAudio. An attacker exploiting this vulnerability could cause the program to crash...
OESA-2024-2431 python-requests security update
Requests is an HTTP library, written in Python, as an alternative to Python's builtin urllib2 which requires work even method overrides to perform basic tasks. Features of Requests: - GET, HEAD, POST, PUT, DELETE Requests: + HTTP Header Request Attachment. + Data/Params Request Attachment. +...