14862 matches found
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar Plugin <= 4.10 is vulnerable to Broken Access Control
Software MP3 Audio Player for Music, Radio & Podcast by Sonaar Type Plugin Vulnerable versions = 4.10 Fixed in 4.10.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47822 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 8b88ee16e64b...
CVE-2023-33878
Path transversal in some IntelR NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-33878
The CVE-2023-33878 issue affects Intel NUC P14E Laptop Element Audio Install Package for Windows (before version 156). Root cause: path traversal in the installer/software update flow could be exploited by an authenticated local user to escalate privileges. Impact as described: local escalation o...
CVE-2023-33878
Path transversal in some IntelR NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...
kernel: ASoC: soc-compress: Reposition and add pcm_mutex
A locking issue was found in the ASoC ALSA SoC compressed audio subsystem in the Linux kernel. When DPCM Dynamic PCM compressed streams are started, several functions access resources without properly holding the card-pcmmutex lock. This triggers lock assertion warnings and can cause kernel panic...
The vulnerability of the `calc_output_single` function in the `src_sinc.c` component of the Secret Rabbit Code frequency conversion library, which allows a intruder to cause a service failure.
The vulnerability of the calcoutputsingle function in the srcsinc.c component of the Secret Rabbit Code frequency conversion library is related to reading data from buffer memory beyond its allowable limits. Exploiting this vulnerability allows a remote attacker to cause a service failure through...
CVE-2023-6073
Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 and other vehicles of the VW Group with the same hardware and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls...
Design/Logic Flaw
Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 and other vehicles of the VW Group with the same hardware and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls...
CVE-2023-6073 DoS and Control of Volume Settings for VW ID.3 ICAS3 IVI ECU
Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 and other vehicles of the VW Group with the same hardware and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls...
SUSE CVE-2023-5996
Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2023-5996
Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
kernel: ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
A slab-out-of-bounds read vulnerability was found in the Linux kernel's ASoC tx-macro codec driver. The decimator variable was incorrectly sized at 32 bits, causing regcacheflatread to access memory beyond the allocated slab when reading register cache values during the txmacrodigitalmute...
kernel: ASoC: fsl_mqs: move of_node_put() to the correct location
In the Linux kernel, the following vulnerability has been resolved: ASoC: fslmqs: move ofnodeput to the correct location ofnodeput should have been done directly after mqspriv-regmap = sysconnodetoregmapgprnp; otherwise it creates a reference leak on the success path. To fix this, ofnodeput is...
kernel: ASoC: lpass: Fix for KASAN use_after_free out of bounds
In the Linux kernel, the following vulnerability has been resolved: ASoC: lpass: Fix for KASAN useafterfree out of bounds When we run syzkaller we get below Out of Bounds error. "KASAN: slab-out-of-bounds Read in regcacheflatread" Below is the backtrace of the issue: BUG: KASAN: slab-out-of-bound...
kernel: ASoC: soc-compress: Reposition and add pcm_mutex
A locking issue was found in the ASoC ALSA SoC compressed audio subsystem in the Linux kernel. When DPCM Dynamic PCM compressed streams are started, several functions access resources without properly holding the card-pcmmutex lock. This triggers lock assertion warnings and can cause kernel panic...
kernel: Linux kernel: ALSA HDA denial of service via array overflow
A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA High Definition Audio HDA component. A local user could exploit this vulnerability by providing specially crafted 9.1 surround channel names, leading to an array overflow in the getlineoutpfx function. This can cause a...
CVE-2023-33059
Memory corruption in Audio while processing the VOC packet data from ADSP...
CVE-2023-33074
Memory corruption in Audio when SSR event is triggered after music playback is stopped...