PT-2026-21705

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Firefox ESR versions prior to 115.33 Firefox ESR versions prior to 140.8 Thunderbird versions prior to 148 Thunderbird versions prior to 140.8 Description A use-after-free issue exists in the Audio/Video: Playback...

PT-2026-7043

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.22.0 Description FreeRDP, a Remote Desktop Protocol implementation, contains a flaw in the RDPSND async playback thread. Specifically, the thread may process queued Protocol Data Units PDUs after the channel is clos...

PT-2026-27392

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149 Firefox ESR versions prior to 115.34 Firefox ESR versions prior to 140.9 Thunderbird versions prior to 149 Thunderbird versions prior to 140.9 Description An issue exists due to incorrect boundary conditions withi...

[SECURITY] Fedora 43 Update: fluidsynth-2.5.2-1.fc43

FluidSynth is a real-time software synthesizer based on the SoundFont 2 specifications. It is a "software synthesizer". FluidSynth can read MIDI even ts from the MIDI input device and render them to the audio device. It features real-time effect modulation using SoundFont 2.01 modulators, and a...

CVE-2025-47320

Memory corruption while processing MFC channel configuration during music playback...

CVE-2025-27063

Memory corruption during video playback when video session open fails with time out error...

CVE-2025-47320

Memory corruption while processing MFC channel configuration during music playback...

CVE-2025-27063

Memory corruption during video playback when video session open fails with time out error...

CVE-2025-47320 Out-of-bounds Write in Audio

Memory corruption while processing MFC channel configuration during music playback...

EUVD-2025-204031

Memory corruption while processing MFC channel configuration during music playback...

CVE-2025-47320

CVE-2025-47320 affects Qualcomm’s audio-kernel where a memory corruption occurs while processing MFC channel configuration during music playback. The CVE entry notes a high-severity issue with local attack vector, requiring low privileges and no user interaction, affecting confidentiality, integr...

CVE-2025-47320 Out-of-bounds Write in Audio

Memory corruption while processing MFC channel configuration during music playback...

CVE-2025-27063

CVE-2025-27063: Memory corruption during video playback when a video session open fails with a timeout error is identified on Qualcomm video-driver components. Affected software involves the Qualcomm video-driver/video session handling; root cause referenced as memory corruption during failure to...

CVE-2025-27063 Use After Free in Video

Memory corruption during video playback when video session open fails with time out error...

EUVD-2025-204033

Memory corruption during video playback when video session open fails with time out error...

EUVD-2025-203707

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix GEM free for imported dma-bufs Imported dma-bufs also have obj-resv != &obj-resv. So we should check both this condition in addition to flags for handling the NOSHARE case. Fixes this splat that was reported with IRI...

UBUNTU-CVE-2025-68189

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix GEM free for imported dma-bufs Imported dma-bufs also have obj-resv != &obj-resv. So we should check both this condition in addition to flags for handling the NOSHARE case. Fixes this splat that was reported with IRI...

PT-2025-51602

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc7 Description The Linux kernel contains a flaw within the drm/msm subsystem related to the handling of imported DMA buffers during object freeing. Specifically, the condition checking for the NO SHARE ca...

SUSE SLES15: WebKitGTK-4.0-lang / WebKitGTK-4.1-lang / WebKitGTK-6.0-lang / etc (SUSE-SU-2025:02777-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02777-1 advisory. Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to...

[SECURITY] Fedora 43 Update: wireshark-4.6.1-1.fc43

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...