9721 matches found
CVE-2024-47835
CVE-2024-47835 affects GStreamer and specifically the LRC subtitle parser: the null pointer dereference occurs in the parse_lrc function of gstsubparse.c when strchr(line, ']') returns NULL and the code then uses start+1 with g_strdup(), triggering a crash. The issue is triggered when a line lack...
CVE-2024-47778
GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in gstwavparseadtlchunk within gstwavparse.c. This vulnerability arises due to insufficient validation of the size parameter, which can exceed the bounds of the data buffer. ...
CVE-2024-47774
CVE-2024-47774 affects GStreamer, specifically the gstreamer1-plugins-good component. The root cause is an OOB-read in the function gst_avi_subtitle_parse_gab2_chunk (gstavisubtitle.c) where name_length is read from the input without proper validation, and an overflow condition when name_length &...
CVE-2024-47613
GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been identified in gstgdkpixbufdecflush within gstgdkpixbufdec.c. This function invokes memcpy, using outpix as the destination address. outpix is expected to point to the fra...
CVE-2024-49105
creationtimestamp| type| source ---|---|--- 2024-12-11 19:05:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/113635749627048903 2025-01-15 12:01:53+00:00| seen| https://bsky.app/profile/andresbohren.bsky.social/post/3lfrpsqh6tc24...
CVE-2024-47599 GHSL-2024-247: GStreamer Insufficient error handling in JPEG decoder that can lead to NULL-pointer dereferences
GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gstjpegdecnegotiate function in gstjpegdec.c. This function does not check for a NULL return value from gstvideodecodersetoutputstate. When this happens...
CVE-2024-45337
creationtimestamp| type| source ---|---|--- 2024-12-11 18:57:59+00:00| seen| https://infosec.exchange/users/cve/statuses/113635719810666284 2024-12-11 19:02:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113635736576468884 2024-12-16 05:52:16+00:00| seen|...
CVE-2024-37401
An out-of-bounds read in IPsec of Ivanti Connect Secure before version 22.7R2.1 allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-42448
From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to perform Remote Code Execution RCE on the VSPC server machine...
CVE-2024-11053 netrc and redirect credential leak
When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but...
CVE-2024-12551
creationtimestamp| type| source ---|---|--- 2024-12-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1677/ 2025-02-11 20:16:07+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhzflzqo2z 2025-02-18 23:42:23+00:00| seen|...
CVE-2024-12550
creationtimestamp| type| source ---|---|--- 2024-12-11 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1678/ 2025-02-11 20:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhzcxzde2a 2025-02-20 23:26:55+00:00| seen|...
PT-2024-17616 · Dromara · Dromara Ujcms
Name of the Vulnerable Software and Affected Versions: Dromara UJCMS versions up to 9.6.3 Description: A problematic vulnerability has been found in Dromara UJCMS, affecting an unknown part of the file /users/id of the component User ID Handler. The manipulation leads to authorization bypass. It ...
GStreamer buffer error vulnerability
GStreamer is the GStreamer open source set of frameworks for processing streaming media. GStreamer suffers from a buffer error vulnerability that stems from a stack buffer overflow detected in the vorbishandleidentificationpacket function in gstvorbisdec.c. The vulnerability is caused by the...
GStreamer buffer error vulnerability
GStreamer is the GStreamer open source set of frameworks for processing streaming media. GStreamer suffers from a buffer error vulnerability that stems from a stack buffer overflow detected in the vorbishandleidentificationpacket function in gstvorbisdec.c. The vulnerability is caused by the...
CVE-2024-26923
creationtimestamp| type| source ---|---|--- 2024-12-10 20:32:03+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113630427385273491...
CVE-2024-49090 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2024-49088 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...