The vulnerability of the Digital Media component of Microsoft Windows operating systems, which allows attackers to enhance their privileges

The vulnerability of the Digital Media component of Microsoft Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...

PT-2025-2731 · Unknown · Redaxo Cms

Name of the Vulnerable Software and Affected Versions: REDAXO CMS version 5.17.1 Description: A stored cross-site scripting XSS vulnerability in the component /media/test.html of REDAXO CMS allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password...

CVE-2024-56578

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Set video drvdata before register video device The video drvdata should be set before the video device is registered, otherwise videodrvdata may return NULL in the open file ops, and led to oops...

The vulnerability of the Linux operating system’s kernel’s media component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel media component is related to the assignment of the NULL pointer in the hantrowatchdog function. Exploiting this vulnerability can allow an attacker to trigger a service failure...

CVE-2024-53063

In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: prevent the risk of out of memory access The dvbdev contains a static variable used to store dvb minors. The behavior of it depends if CONFIGDVBDYNAMICMINORS is set or not. When not set, dvbregisterdevice won't che...

CVE-2024-53061 media: s5p-jpeg: prevent buffer overflows

In the Linux kernel, the following vulnerability has been resolved: media: s5p-jpeg: prevent buffer overflows The current logic allows word to be less than 2. If this happens, there will be buffer overflows, as reported by smatch. Add extra checks to prevent it. While here, remove an unused word ...

PT-2024-8968 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 131.0.6778.69 Description: The issue is related to a use-after-free vulnerability in the Media component of Google Chrome, which can be exploited by a remote attacker using a specially crafted HTML page. This...

The vulnerability of the Linux operating system’s kernel’s media component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel media component is related to a memory leak in the irtoytx function. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper use of GPIO functions by the ar0521 driver for the i2c driver in the media component...

PT-2024-34113

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A spectre-related vulnerability has been identified in the Linux kernel, specifically in the media: av7110 component. The issue was detected by smatch, a static analysis tool, which...

CVE-2024-42313

CVE-2024-42313 affects the Linux kernel’s media: venus path, specifically a use-after-free in vdec_close() when the firmware queues a buffer-release work via HFI callbacks during decoding. The issue can occur if the decoder device is closed from userspace during normal decoding, potentially leadi...

The vulnerability of the MFC media component in the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the MFC media component in the Android operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-52642

In the Linux kernel, the following vulnerability has been resolved: media: rc: bpf attach/detach requires write permission Note that bpf attach/detach also requires CAPNETADMIN...

CVE-2021-46944

In the Linux kernel, the following vulnerability has been resolved: media: staging/intel-ipu3: Fix memory leak in imufmt We are losing the reference to an allocated memory if try. Change the order of the check to avoid that...

Neos CMS Cross Site Scripting vulnerability

Cross Site Scripting XSS vulnerability in Neos CMS 8.3.3 allows a remote authenticated attacker to execute arbitrary code via a crafted SVG file uploaded to the neos/management/media component. To make use of this attack vector, the attacker must either be able to upload a maliciously crafted fil...

The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to read and write arbitrary files.

The vulnerability of the Google Chrome browser’s Media component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to read and write arbitrary files using a specially crafted HTML page...

The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s Media component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome prior to version 114.0.5735.198, which stems from a memory reuse after release issue in Media. A remote attacker could exploit this vulnerability to cause heap corruption via...

PT-2023-3385 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 114.0.5735.198 Description: The issue is related to a use after free vulnerability in the Media component of Google Chrome, which can lead to heap corruption. This can potentially allow a remote attacker to...

Arbitrary Code Execution

tcg/voyager is vulnerable to Arbitrary Code Execution. The vulnerability exists due to improper input sanitization which allows an attacker to execute arbitrary codes via a crafted .php file to the media component...