SDL 2: Multiple vulnerabilities

Background Simple DirectMedia Layer is a cross-platform development library designed to provide low level access to audio, keyboard, mouse, joystick, and graphics hardware via OpenGL and Direct3D. Description Multiple vulnerabilities have been discovered in SDL 2. Please review the CVE identifier...

PT-2021-5451 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-9 through Android-12 Description: The issue is related to a heap buffer overflow in the C2SoftMP3::process function of C2SoftMp3Dec.cpp, which could lead to remote information disclosure without requiring additional...

SUSE SLED15: qemu / qemu-arm / qemu-audio-alsa / qemu-audio-pa / etc (SUSE-SU-2021:2442-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2442-1 advisory. - CVE-2021-3582: Fix possible mremap overflow in the pvrdma bsc1187499 - CVE-2021-3607: Ensure correct input on ring init bsc1187539 -...

Apple macOS 资源管理错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. Apple macOS suffers from a resource management error vulnerability that stems from a boundary condition error in the GetFramesPerPacket function in AudioToolboxCore. A remote attacker can exploit the...

PT-2021-18840 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.5 iPadOS versions prior to 14.5 Description: A memory consumption issue was addressed with improved memory handling. Processing a maliciously crafted audio file may lead to arbitrary code execution. Recommendations: F...

Adobe Audition Out-of-Bounds Read Vulnerability

Adobe Audition is an audio editor and post-production suite. An out-of-bounds read vulnerability exists in Adobe Audition 14.2 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary code...

About the security content of iOS 14.7 and iPadOS 14.7

About the security content of iOS 14.7 and iPadOS 14.7 This document describes the security content of iOS 14.7 and iPadOS 14.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

PT-2022-4747 · Qemu +10 · Qemu +10

Name of the Vulnerable Software and Affected Versions: QEMU versions prior to 7.0.0 Description: A stack overflow vulnerability was found in the Intel HD Audio device of QEMU, allowing a malicious guest to crash the QEMU process on the host, resulting in a denial of service condition. The highest...

Adobe Media Encoder incorrect input validation vulnerability

Adobe Media Encoder, a video and audio encoding application, is vulnerable in Adobe Media Encoder 15.2 and earlier versions. An attacker could exploit the vulnerability to execute arbitrary code...

About the security content of macOS Big Sur 11.5

About the security content of macOS Big Sur 11.5 This document describes the security content of macOS Big Sur 11.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

QEMU 缓冲区错误漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. A buffer overflow vulnerability exists in QEMU versions prior to 7.0.0, which stems from a buffer overflow issue in QEMU's Intel HD Audio devic...

Apple macOS Big Sur 输入验证错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur 11.5 suffers from an input validation error vulnerability that stems from insufficient validation of user-provided input in the CoreAudio subsystem. A remote attacker could exploit the vulnerability to deliver...

Adobe Media Encoder out-of-bounds read vulnerability (CNVD-2021-54350)

Adobe Media Encoder, a video and audio encoding application, is vulnerable to an out-of-bounds read vulnerability in Adobe Media Encoder version 15.2 and earlier. An attacker could exploit this vulnerability to execute arbitrary code...

About the security content of iOS 14.7 and iPadOS 14.7

About the security content of iOS 14.7 and iPadOS 14.7 This document describes the security content of iOS 14.7 and iPadOS 14.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

A brief guide on building audio and video live streaming platform

By Owais Sultan Live streaming is a profitable business. In this article, you'll get to know how to build a secure, user-friendly, and functional website for live streams. This is a post from HackRead.com Read the original post: A brief guide on building audio and video live streaming platform...

The vulnerability of the wav_write_header() function in the Libsndfile library, which is used for reading and writing audio files, relates to reading data beyond the allowed buffer limits. This allows an attacker to cause a service failure.

The vulnerability of the wavwriteheader function in the Libsndfile library for reading and writing audio files is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

Default credentials

Nextcloud Talk is a fully on-premises audio/video and chat communication service. In versions prior to 11.2.2, if a user was able to reuse an earlier used username, they could get access to any chat message sent to the previous user with this username. The issue was patched in versions 11.2.2 and...

OPENSUSE-SU-2021:1012-1 Security update for gstreamer-plugins-bad

This update for gstreamer-plugins-bad fixes the following issues: - Update to version 1.16.3: - CVE-2021-3185: buffer overflow in gsth264sliceparsedecrefpicmarking bsc1181255 - amcvideodec: fix sync meta copying not taking a reference - audiobuffersplit: Perform discont tracking on running time -...

Realtek HAD Buffer Overflow Vulnerability

Realtek HAD is a high-definition audio driver package from China-based Realtek. Realtek HAD is vulnerable to a buffer overflow vulnerability, which could be exploited by an attacker to send a special string to the kernel driver in user mode, and the kernel driver causes a system crash due to an...

CVE-2021-32537 Realtek High definition audio Windows driver crashed

Realtek HAD contains a driver crashed vulnerability which allows local side attackers to send a special string to the kernel driver in a user’s mode. Due to unexpected commands, the kernel driver will cause the system crashed...