Google Android MediaTek Component Information Disclosure Vulnerability (CNVD-2020-44357)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the MediaTek component Multimedia Processing Driver in Google Android, which can be exploited by attackers to obta...

Google Android MediaTek component elevation of privilege vulnerability (CNVD-2020-44361)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the MediaTek component Multimedia Processing Driver in Google Android, which can be exploited by attackers to...

[ASA-202007-4] ffmpeg: arbitrary code execution

Arch Linux Security Advisory ASA-202007-4 ========================================= Severity: High Date : 2020-07-31 CVE-ID : CVE-2020-13904 Package : ffmpeg Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1180 Summary ======= The package ffmpeg before versi...

Debian DLA-2291-1 : ffmpeg security update

Several vulnerabilities have been fixed by upgrading FFmpeg, a widely used multimedia framework, from 3.2.14 to 3.2.15. CVE-2019-13390 rawenc: Only accept the appropriate stream type for raw muxers. CVE-2019-17542 Heap-based buffer overflow in vqadecodechunk. CVE-2020-13904 Use-after-free via a...

[SECURITY] [DLA 2291-1] ffmpeg security update

Debian LTS Advisory DLA-2291-1 [email protected] https://www.debian.org/lts/security/ July 27, 2020 https://wiki.debian.org/LTS Package : ffmpeg Version : 7:3.2.15-0+deb9u1 CVE ID : CVE-2019-13390 CVE-2019-17542 CVE-2020-13904 Debian Bug : Several vulnerabilities have been fixed by...

USN-4431-1: FFmpeg vulnerabilities

It was discovered that FFmpeg incorrectly verified empty audio packets or HEVC data. An attacker could possibly use this issue to cause a denial of service via a crafted file. This issue only affected Ubuntu 16.04 LTS, as it was already fixed in Ubuntu 18.04 LTS. For more information see:...

OPENSUSE-SU-2020:1032-1 Security update for chromium

This update for chromium fixes the following issues: Update to 83.0.4103.116 boo1173251: CVE-2020-6509: Use after free in extensions - Add patch to work with new ffmpeg bsc1173292 - Add multimedia fix for disabled location and also try one additional patch from Debian on the same issue boo1173107...

openSUSE Security Update : chromium (openSUSE-2020-887)

This update for chromium fixes the following issues : Update to 83.0.4103.116 boo1173251 : - CVE-2020-6509: Use after free in extensions - Add patch to work with new ffmpeg bsc1173292 - Add multimedia fix for disabled location and also try one additional patch from Debian on the same issue...

SQL Injection Vulnerability in ne***.php Page of Website Building System of Jingteng Multimedia Co.

With the marketing planning and project manager system, Jingteng Multimedia Co., Ltd. analyzes customers' strengths and provides users with exclusive suggestions for website setup. A SQL injection vulnerability exists in the ne.php page of the website builder system of KING TENG MULTIMEDIA...

multimedia-downloads.com Cross Site Scripting vulnerability OBB-1226030

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Debian: Security Advisory (DSA-4722-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4722-1 : ffmpeg - security update

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

The vulnerability of the GPAC multimedia platform, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of the multimedia platform GPAC is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

OPENSUSE-SU-2020:0902-1 Security update for chromium

This update for chromium fixes the following issues: Update to 83.0.4103.116 boo1173251: CVE-2020-6509: Use after free in extensions - Add patch to work with new ffmpeg bsc1173292 - Add multimedia fix for disabled location and also try one additional patch from Debian on the same issue boo1173107...

openSUSE: Security Advisory for chromium (openSUSE-SU-2020:0887-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for chromium (openSUSE-SU-2020:0893-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:0893-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to 83.0.4103.116 boo1173251: CVE-2020-6509: Use after free in extensions Chromium was updated to 83.0.4103.106 boo1173029: CVE-2020-6505: Use after free in speech CVE-2020-6506: Insufficient policy enforcement in WebView...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:0887-1 Rating: important References: 1173107 1173187 1173188 1173251 1173254 1173292 Cross-References: CVE-2020-6509 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has 5 fix...

OPENSUSE-SU-2020:0887-1 Security update for chromium

This update for chromium fixes the following issues: Update to 83.0.4103.116 boo1173251: CVE-2020-6509: Use after free in extensions - Add patch to work with new ffmpeg bsc1173292 - Add multimedia fix for disabled location and also try one additional patch from Debian on the same issue boo1173107...

The vulnerability of the `cbs_jpeg_split_fragment` function in the Ffmpeg multimedia library allows a attacker to trigger a service failure.

The vulnerability of the cbsjpegsplitfragment function in the FFmpeg multimedia library is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...