CVE-2022-32946

CVE-2022-32946 affects iOS and iPadOS where an entitlement-related issue could allow an app to record audio via connected AirPods. The vulnerability is described as a local issue with low attack complexity and requires user interaction; its impact is possible audio recording without explicit micr...

UBUNTU-CVE-2022-3784

A vulnerability classified as critical was found in Axiomatic Bento4 5e7bb34. Affected by this vulnerability is the function AP4Mp4AudioDsiParser::ReadBits of the file Ap4Mp4AudioInfo.cpp of the component mp4hls. The manipulation leads to heap-based buffer overflow. The attack can be launched...

PT-2022-24108 · Axiomatic · Bento4

Name of the Vulnerable Software and Affected Versions: Axiomatic Bento4 version 5e7bb34 Description: A critical issue was found in the function AP4 Mp4AudioDsiParser::ReadBits of the file Ap4Mp4AudioInfo.cpp, which is part of the mp4hls component. This issue leads to a heap-based buffer overflow...

Bento4 缓冲区错误漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version 5e7bb34, which stems from an affected AP4Mp4AudioDsiParser::ReadBits function in the Ap4Mp4AudioInfo.cpp file in the component mp4hls, which may result in a heap-based buffer...

PT-2022-21601 · Apple · Airpods +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.1 iPadOS versions prior to 16.1 Description: The issue allowed apps with Bluetooth access to record audio using connected AirPods, potentially capturing conversations with Siri and background sound. This was possible...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libmad (SUSE-SU-2022:3782-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3782-1 advisory. - CVE-2017-8373: Fixed heap-based buffer overflow in madlayerIII bsc1036968. - CVE-2017-8372:...

About the security content of iOS 15.7.1 and iPadOS 15.7.1

About the security content of iOS 15.7.1 and iPadOS 15.7.1 This document describes the security content of iOS 15.7.1 and iPadOS 15.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

SUSE: Security Advisory (SUSE-SU-2022:3727-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS and iPadOS, which arises from an application that may be able to...

PT-2022-21600 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13 Description: An access issue was addressed with additional sandbox restrictions on third-party apps. This issue allows an app to potentially record audio with paired AirPods. Recommendations: For versions prior to 1...

About the security content of iOS 16.1 and iPadOS 16

About the security content of iOS 16.1 and iPadOS 16 This document describes the security content of iOS 16.1 and iPadOS 16. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

PT-2022-26588 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 16.1 Apple iOS versions prior to 15.7.1 and prior to 16.1 Apple iPadOS versions prior to 15.7.1 and prior to 16 Apple macOS versions prior to 13, prior to 12.6.1, and prior to 11.7.1 Apple watchOS versions prior t...

About the security content of watchOS 9.1

About the security content of watchOS 9.1 This document describes the security content of watchOS 9.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

MGASA-2022-0379 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.74 and fixes at least the following security issues: A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root host user-level application to crash the host kernel by creating a confidential guest VM...

[SECURITY] Fedora 35 Update: wavpack-5.5.0-2.fc35

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Although the technology is loosely based on previous versions of WavPack, the new version 4 format has been designed from the ground up to offer unparalleled...

Denial Of Service (DoS)

nginx is vulnerable to denial of service. The module ngxhttpmp4module allows a local attacker to cause a worker process to crash, trigger a memory disclosure by using a specially crafted audio or video file...

Denial Of Service (DoS)

nginx is vulnerable to denial of service. The vulnerability exists due to a memory corruption in ngxhttpmp4module when the mp4 directive is used in the configuration file which allows an attacker to cause an application crash using a specially crafted audio or video file...

The vulnerability of the RDP client FreeRDP, related to the issue of operations going beyond the buffer in memory, allows an attacker to gain access to read, modify, or delete audio/video data.

The vulnerability of the RDP client FreeRDP arises from the issue of the operation going beyond the buffer boundaries in memory when the /video command-line parameter is used. Exploiting this vulnerability can allow a remote attacker to gain access to, read, modify, or delete audio/video data...

FreeBSD : nginx -- Two vulnerabilities (676d4f16-4fb3-11ed-a374-8c164567ca3c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 676d4f16-4fb3-11ed-a374-8c164567ca3c advisory. - NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before...

CVE-2022-41743

NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngxhttphlsmodule that might allow a local attacker to corrupt NGINX worker memory, resulting in its crash or potential other impact using a specially crafted audio or video file. The issue affects only NGINX Plus when...