Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a denial of service vulnerability caused by a stack buffer overflow in the WebAudio OscillationNode object. An attacker can exploit this vulnerability to cause the browser ...

PT-2024-11902 · Canonical +1 · Pipewire-Pulse +1

Name of the Vulnerable Software and Affected Versions: pipewire-pulse in Ubuntu snap affected versions not specified Description: The issue concerns the pipewire-pulse in Ubuntu snap, which grants microphone access even when the snap interface for audio-record is not set. This could potentially...

CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

UBUNTU-CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

January 23, 2024—KB5034204 (OS Builds 22621.3085 and 22631.3085) Preview

None None...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome Web Audio module, which stems from a confusion in the instructions responsible for freeing memory in the Web Audio module. An attacker can exploit this vulnerability to...

PT-2024-1390 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.85 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in Web Audio, which could allow a remote attacker to potentially exploit heap corruption via a...

Zelle Is Using My Name and Voice without My Consent

Okay, so this is weird. Zelle has been using my name, and my voice, in audio podcast ads--without my permission. At least, I think it is without my permission. Its possible that I gave some sort of blanket permission when speaking at an event. Its not likely, but it is possible. I wrote to Zelle...

The vulnerability of microprogrammed software in telephones and audio conferencing systems for Poly allows a intruder to change the administrator password.

The vulnerability of microprogrammed software in telephones and audio conferencing systems is related to the lack of necessary checks during password changes. Exploiting this vulnerability can allow a remote attacker to change the administrator’s password...

Ubuntu: Security Advisory (USN-6567-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6567-1: QEMU vulnerabilities

Gaoning Pan and Xingwei Li discovered that QEMU incorrectly handled the USB xHCI controller device. A privileged guest attacker could possibly use this issue to cause QEMU to crash, leading to a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2020-14394 It w...

USN-6567-1 qemu vulnerabilities

Gaoning Pan and Xingwei Li discovered that QEMU incorrectly handled the USB xHCI controller device. A privileged guest attacker could possibly use this issue to cause QEMU to crash, leading to a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2020-14394 It w...

Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : QEMU vulnerabilities (USN-6567-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6567-1 advisory. Gaoning Pan and Xingwei Li discovered that QEMU incorrectly handled the USB xHCI controller device. A privileged guest attack...

Gom Player 2.3.92.5362 Buffer Overflow Exploit

Exploit Title: Gom Player 2.3.92.5362 - Buffer Overflow PoC Discovered by: Yehia Elghaly Mrvar0x Vendor Homepage: https://www.gomlab.com/en Tested Version: 2.3.92.5362 Tested on: Windows 7, Windows 10 - Open GOM Player - Click on the settings - From the menu, select Audio -- Equalizer - Click on...

SUSE CVE-2024-0224

Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-49142

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer...

Null pointer dereference

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer...

CVE-2023-49142 multimedia audio has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer...

CVE-2023-49142 multimedia audio has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer...

CVE-2023-49142

CVE-2023-49142 affects OpenHarmony versions 3.2.2 and earlier. The issue is a use-after-free in a multimedia audio component caused by modifying a released pointer, enabling a local attacker to trigger a multimedia audio crash. Impact is limited to availability (crash) per documented metrics; no ...