CVE-2021-21114

Use after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

USN-4682-1: WavPack vulnerability

It was discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to execute arbitrary code or cause a crash...

Google Warns of Critical Android Remote Code Execution Bug

Google has fixed two critical bugs affecting its Android handsets. The more serious flaws exists in the Android System component and allow remote attackers to execute arbitrary code. The two critical vulnerabilities are part of Google’s January Android security bulletin, released Monday. The...

Google Speech-to-Text API Can Help Attackers Easily Bypass Google reCAPTCHA

A three-year-old attack technique to bypass Google's audio reCAPTCHA by using its own Speech-to-Text API has been found to still work with 97% accuracy. Researcher Nikolai Tschacher disclosed his findings in a proof-of-concept PoC of the attack on January 2. "The idea of the attack is very simple...

Google Speech-to-Text API Can Help Attackers Easily Bypass Google reCAPTCHA

A three-year-old attack technique to bypass Google's audio reCAPTCHA by using its own Speech-to-Text API has been found to still work with 97% accuracy. Researcher Nikolai Tschacher disclosed his findings in a proof-of-concept PoC of the attack on January 2. "The idea of the attack is very simple...

Researcher Breaks reCAPTCHA With Google’s Speech-to-Text API

An old attack method dating back to 2017 that uses voice-to-text to bypass CAPTCHA protections turns out to still work on Google’s latest reCAPTCHA v3. That’s according to researcher Nikolai Tschacher, who posted a video proof-of-concept PoC of the attack on Jan. 2. CAPTCHA, introduced in 2014, i...

Google ReCaptcha flaw lets bots bypass audio captcha challenge

By Sudais Asif According to researchers, the idea of the attack is to grab the MP3 file of the audio reCAPTCHA and submit it to Google's own Speech to Text API. This is a post from HackRead.com Read the original post: Google ReCaptcha flaw lets bots bypass audio captcha challenge...

FBI Warn Hackers are Using Hijacked Home Security Devices for 'Swatting'

Stolen email passwords are being used to hijack smart home security systems to “swat” unsuspecting users, the Federal Bureau of Investigation warned this week. The announcement comes after concerned device manufacturers alerted law enforcement about the issue. Swatting is a dangerous prank where...

Dhowden Tag Input Validation Error Vulnerability

Dhowden Tag is a Go-based MP3/MP4/OGG/FLAC metadata parsing library by the Dhowden personal developer. A security vulnerability exists in dhowden tag versions prior to 2020-11-19, which allows "panic: runtime error: index out of range" to be read via readAPICFrame...

Dhowden Tag Input Validation Error Vulnerability

Dhowden Tag is a Go-based MP3/MP4/OGG/FLAC metadata parsing library from the Dhowden personal developers. A security vulnerability exists in versions of dhowden tag prior to 2020-11-19, which allows parsing of MP3/MP4/OGG/FLAC metadata via readAtomData "panic: runtime error: slice bounds out of...

Eavesdropping on Phone Taps from Voice Assistants

The microphones on voice assistants are very sensitive, and can snoop on all sorts of data: In Hey Alexa what did I just type? we show that when sitting up to half a meter away, a voice assistant can still hear the taps you make on your phone, even in presence of noise. Modern voice assistants ha...

Information Disclosure

chromium is vulnerable to information disclosure. An out-of-bounds read in the audio allows a remote attacker to obtain confidential information from process memory via a malicious HTML page...

Use After Free

chromium, sid is vulnerable is use after free in audio in Google Chrome. It allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Use After Free

Use after free in audio in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

PyMICROPSIA Windows malware steals browsing data, record audio

By Waqas PyMICROPSIA malware is developed to target Windows operating systems yet it checks for other operating systems, such as “darwin” or “POSIX.” This is a post from HackRead.com Read the original post: PyMICROPSIA Windows malware steals browsing data, record audio...

About the security content of watchOS 7.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

About the security content of tvOS 14.2 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

EulerOS 2.0 SP5 : taglib (EulerOS-SA-2020-2566)

According to the version of the taglib package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure heap-based...

Apple CoreAudio Buffer Error Vulnerability

Apple CoreAudio is an American Apple component for processing audio in macOS devices. A security vulnerability exists in Apple CoreAudio, where processing of maliciously crafted audio files may result in arbitrary code execution. The following products and versions are affected: macOS Mojave...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2020:2260-1 Rating: important References: 1149032 1152489 1153274 1154353 1155518 1160634 1166146 1166166 1167030 1167773 1170139 1171073 1171558 1172873 1173504 1174852 1175306 1175918 1176109 1176180...