PJSIP DNS Resolution Code Execution

The vulnerability of the DNS resolution implementation in the PJSIP multimedia communication library involves copying buffers without checking the size of the input data during DNS packet processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PJSIP Loop DoS

The vulnerability of the PJSIP multimedia communication library lies in the execution of a loop with an unavailable exit condition during the processing of WAV/AVI files. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Fedora: Security Advisory for mingw-SDL2_ttf (FEDORA-2022-280ac942be)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: mingw-SDL2_ttf-2.0.18-2.fc34

Simple DirectMedia Layer SDL2 is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device. This package contains a library that allows you to use TrueType fonts to render text in SDL2 applications...

[SECURITY] Fedora 35 Update: mingw-SDL2_ttf-2.0.18-2.fc35

Simple DirectMedia Layer SDL2 is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device. This package contains a library that allows you to use TrueType fonts to render text in SDL2 applications...

[SECURITY] Fedora 36 Update: mingw-SDL2_ttf-2.0.18-3.fc36

Simple DirectMedia Layer SDL2 is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device. This package contains a library that allows you to use TrueType fonts to render text in SDL2 applications...

PJSIP Synchronization DoS

The vulnerability of the PJSIP multimedia communication library is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to cause service failures...

PJSIP Heap Buffer Overflow DoS

The vulnerability of the PJSIP multimedia communication library is related to the issue of the operation exceeding the buffer boundaries in memory when processing RTP/RTCP packets. Exploiting this vulnerability could allow a malicious actor to cause service failure...

PJSIP Heap Buffer Overflow DoS

The vulnerability of the pjsuacalldump function in the multimedia communication library PJSIP is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PJSIP Buffer Overflow DoS

The vulnerability of the PJSIP multimedia communication library is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PJSIP Heap Buffer Overflow DoS

The vulnerability of the pjsuarecordercreate function in the PJSIP multimedia communication library is related to reading beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ALPINE-CVE-2022-24764

PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack buffer overflow vulnerability that affects PJSUA2 users or users that call the API pjmediasdpprint, pjmediasdpmediaprint. Applications that do not use PJSUA2 and do not directly...

PJSIP security vulnerabilities

PJSIP is a free and open source multimedia communication library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. A security vulnerability exists in PJSIP 2.12 and earlier versions that stems from a stack-based buffer overflow vulnerability in...

CVE-2022-24754

PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer overflow vulnerability which only impacts PJSIP users who accept hashed digest credentials credentials with datatype PJSIPCREDDATADIGEST...

PJSIP Heap Buffer Overflow DoS

The vulnerability of the PJSIP multimedia communication library is related to the execution of an operation beyond the buffer boundaries in memory during the processing of the RTCP BYE message length. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PJSIP buffer error vulnerability

PJSIP is a free and open source multimedia communications library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. A buffer error vulnerability exists in PJSIP 2.11.1 and earlier versions, where parsing incoming SIP messages containing malformed...

Ffmpeg Heap Buffer Overflow DoS

The vulnerability of the Ffmpeg multimedia library is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

DEBIAN-CVE-2021-45831

A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via strlenavx2, which causes a Denial of Service...

PJSIP security vulnerabilities

PJSIP is a free and open source multimedia communication library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. PJSIP suffers from a security vulnerability in various parts of PJSIP when error/failure occurs, it is found that the function return...

Design/Logic Flaw

PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA a...