On the Randomness of Automatic Card Shufflers

Many years ago, Matt Blaze and I talked about getting our hands on a casino-grade automatic shuffler and looking for vulnerabilities. We never did it--I remember that we didnt even try very hard--but this article shows that we probably would have found non-random properties: …the executives had...

CVE-2022-25750

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile...

Double free

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile...

Qualcomm BTHOST 资源管理错误漏洞

Qualcomm BTHOST is a Qualcomm component used in Qualcomm products to find Bluetooth hostname and protocol service multiplexer values. A security vulnerability exists in Qualcomm BTHOST that stems from a double memory release during music playback and calls from a Bluetooth headset, resulting in...

CVE-2022-25750

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile...

CVE-2022-25750

The CVE-2022-25750 entry describes a memory corruption flaw in Qualcomm BTHOST on Snapdragon Mobile caused by a double-free during music playback and Bluetooth headset calls. Affected component: BTHOST within Snapdragon Mobile; root cause: memory management error leading to double free; impact: m...

CVE-2022-25750

Memory corruption in BTHOST due to double free while music playback and calls over bluetooth headset in Snapdragon Mobile...

The vulnerability of the Audio component in Qualcomm’s embedded software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Audio microprogramming component in Qualcomm’s embedded chips is related to a numerical overflow during playback of recordings. Exploiting this vulnerability can allow attackers to cause system failures or execute arbitrary codes...

CVE-2022-22074

Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-22074

Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

Integer overflow

Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-22074

Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-22074: Integer Overflow or Wraparound

Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

SUSE-SU-2022:2915-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - Update to version 2.36.5 bsc1201980: - Add support for PAC proxy in the WebDriver implementation. - Fix video playback when loaded through custom URIs, this fixes video playback in the Yelp documentation browser. - Fix...

Malicious code in @7tv/playback-signature (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a90453bb6afe0a129bd8f7c4376d2efd10af9aef8302340ce34e7b6ec4c4819d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-52 Malicious code in @7tv/playback-signature (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a90453bb6afe0a129bd8f7c4376d2efd10af9aef8302340ce34e7b6ec4c4819d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-23747

In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback...

Improper access control

In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback...

CVE-2022-23747

In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback...

CVE-2022-23747

CVE-2022-23747 affects Sony Xperia series 1, 5, and Pro. Connected PT-2022-4245 details a buffer/overrun in the ALAC decoder (libMtkOmxAlacDec.so) caused by missing validation of the number of frames during music playback, leading to out-of-bounds memory access and potential remote arbitrary code...