1035 matches found
PT-2026-31526
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description An integer overflow issue exists in the Media component of Google Chrome. Successful exploitation of this issue could allow a remote attacker to cause a denial-of-service through a...
PT-2026-31528
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description An integer overflow exists in the Media browser component of Google Chrome. Successful exploitation could allow a remote attacker to cause a denial-of-service through a specially crafte...
PT-2026-31527
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description An integer overflow in the Media component allows a remote attacker to potentially exploit heap corruption or cause a denial of service by using a crafted video file. An integer overflo...
PT-2026-31525
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description Insufficient data validation in the Media component of Google Chrome could allow a remote attacker to perform an out-of-bounds memory read using a crafted video file. Exploitation may...
Azure Linux 3.0 Security Update: exiv2 (CVE-2024-25112)
The version of exiv2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-25112 advisory. - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of...
CVE-2025-70299
A heap overflow in the aviparseinputfile function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted AVI file...
Astra Linux – Vulnerability in Chromium
The use of after-free in Storage in Google Chrome before version 141.0.7390.65 allowed a remote attacker to execute arbitrary code through a crafted video file. Chromium security severity: High...
CVE-2022-27492
An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file...
CVE-2025-65407
The Live555 Streaming Media v2018.09.02 library is vulnerable to a use-after-free flaw in the MPEG1or2Demux::newElementaryStream() function. This issue stems from a mix-up in the instructions responsible for freeing memory. An attacker can exploit this by supplying a crafted MPEG Program stream t...
CVE-2025-65406
A heap overflow in the MatroskaFile::createRTPSinkForTrackNumber function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service DoS via supplying a crafted MKV file...
CVE-2025-65406
The Live555 Streaming Media library (specifically version v2018.09.02 ) contains a heap-based buffer overflow vulnerability in the MatroskaFile::createRTPSinkForTrackNumber() function. This flaw stems from an error in the instruction responsible for freeing memory. An attacker can exploit this by...
CVE-2025-11460
Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. Chromium security severity: High...
CVE-2025-11216
Inappropriate implementation in Storage in Google Chrome on Mac prior to 141.0.7390.54 allowed a remote attacker to perform domain spoofing via a crafted video file. Chromium security severity: Low...
CVE-2025-11460
Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. Chromium security severity: High...
CVE-2025-11460
Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. Chromium security severity: High...
CVE-2025-11460
Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. Chromium security severity: High...
CVE-2025-11460
Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. Chromium security severity: High...
CVE-2025-11460
A use-after-free vulnerability exists in the Storage component of Google Chrome (and potentially Microsoft Edge ) prior to version 141.0.7390.65 . The flaw occurs when Storage objects are accessed after being prematurely released, allowing a remote attacker to execute arbitrary code or cause serv...
