PT-2019-16391

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9150 Qualcomm Snapdragon Compute versions MDM9150 Qualcomm Snapdragon Consumer IOT versions MDM9150 Qualcomm Snapdragon Industrial IOT versions MDM9150 Qualcomm Snapdragon IoT versions MDM9150 Qualcomm...

CVE-2019-2334: NULL Pointer Dereference

Null pointer dereferencing can happen when playing the clip with wrong block group id in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650...

CVE-2019-2327: Improper Restriction of Operations within the Bounds of a Memory Buffer

Possible buffer overflow can occur when playing clip with incorrect element size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9650,...

PT-2019-16398

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9150 through SD 855 Qualcomm Snapdragon Compute versions MDM9150 through SD 855 Qualcomm Snapdragon Consumer IOT versions MDM9150 through SD 855 Qualcomm Snapdragon Industrial IOT versions MDM9150 through S...

Android 7 - 9 VideoPlayer - (ihevcd_parse_pps) Out-of-Bounds Write Exploit

CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected is HVEC a.k.a H.265 and MPEG-...

The vulnerability of the Linux operating system’s interrupt handler snd_cs5535audio_interrupt allows a hacker to trigger a service failure.

The vulnerability of the interrupt handler sndcs5535audiointerrupt in the Linux kernel’s sound/pci/cs5535audio/snd-cs5535audio.ko module arises due to the swapping of the null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure by connecting a CS5535 Audio...

June 27, 2019—KB4501375 (OS Build 18362.207)

None None...

CVE-2019-2259

Resource allocation error while playing the video whose dimensions are more than supported dimension in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MSM8909W,...

PT-2019-16339

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions in MSM8909W, MSM8996AU, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 625, SD 632, SD 636, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835...

Broadcast Operations Control Center (BOCC): Enabling OTT Broadcast Operations

So, what is the BOCC? Simply put, Akamai runs a state-of-the-art Broadcast Operations Control Centre, the BOCC, to help ensure smooth and seamless end-user play-back experience for live OTT Over the Top and linear video delivered through Akamai Media Delivery Solutions. To phrase it more...

Fedora 30 : webkit2gtk3 (2019-f18fb0f37d)

Fix rendering of emojis copy-pasted from GTK emoji chooser. - Fix space characters not being rendered with some CJK fonts. - Fix adaptive streaming playback with older GStreamer versions. - Set a maximum zoom level for pinch zooming gesture. - Fix navigation gesture to not interfere with...

Fedora Update for soundtouch FEDORA-2018-09802a742a

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Pixel Update Bulletin—March 2019Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel devices Google devices. For Google devices, security patch levels of 2019-03-05 or later address all issues in this bulletin and all issues in the March 2019 Android...

Unauthorized Access Vulnerability in Himalaya Xiaoya Smart Speakers

Himalaya Xiaoya Smart Speaker is a smart speaker product from Himalaya. Himalaya Xiaoya Smart Speaker suffers from an unauthorized access vulnerability that allows an attacker to control the speaker to play arbitrary audio files both remotely and locally by constructing malicious dlna protocol...

Fedora 29 : webkit2gtk3 (2018-a1f37d2f08)

This update addresses the following vulnerability : - CVE-2018-4345 This update brings the following changes : - Many improvements and fixes for video playback with media source extensions MSE, which improve the user experience across the board, and in particular for playback of WebM videos. - Fi...

Fedora 28 : webkit2gtk3 (2018-509fc4a5c8)

This update addresses the following vulnerability : - CVE-2018-4345 This update brings the following changes : - Many improvements and fixes for video playback with media source extensions MSE, which improve the user experience across the board, and in particular for playback of WebM videos. - Fi...

Denial of Service Vulnerability in Hikvision Video Playback Library SDK

Hikvision Playback Library SDK is a secondary development kit related to playback of Hikvision embedded network DVRs, video servers, and supporting products for IP devices. A denial of service vulnerability exists in the Hikvision Video Playback Library SDK. An attacker can exploit the...

Binary Vulnerability in Hikvision Video Playback Library SDK

Hikvision Playback Library SDK is a secondary development kit related to playback of Hikvision embedded network DVRs, video servers, and supporting products for IP devices. A binary vulnerability exists in the Hikvision Video Playback Library SDK. An attacker can exploit the vulnerability to caus...

Denial of Service Vulnerability in Hikvision Video Playback Library SDK (CNVD-2019-00138)

Hikvision Playback Library SDK is a secondary development kit related to playback of Hikvision embedded network DVRs, video servers, and supporting products for IP devices. A denial of service vulnerability exists in the Hikvision Video Playback Library SDK. An attacker can exploit the...

Hikvision Video Playback Library SDK suffers from an out-of-bounds access vulnerability

Hikvision Playback Library SDK is a secondary development kit related to playback of Hikvision embedded network DVRs, video servers, and supporting products for IP devices. An out-of-bounds access vulnerability exists in the Hikvision Video Playback Library SDK. An attacker can exploit this...