CVE-2022-23747: Buffer Copy without Checking Size of Input

In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback...

openSUSE: Security Advisory for webkit2gtk3 (SUSE-SU-2022:2820-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Sony Xperia 系列安全漏洞

The Sony Xperia series is a line of smartphones from the Japanese company Sony Sony. A security vulnerability exists in the Sony Xperia 1, 5, and Pro series versions, which stems from a lack of validation of the number of frames passed during music playback, which may result in memory access...

PT-2022-4245 · Sony · Sony Xperia Series Pro +2

Name of the Vulnerable Software and Affected Versions: Sony Xperia series 1, 5, and Pro affected versions not specified Description: The issue is related to a buffer overflow in the dynamic memory of the libMtkOmxAlacDec.so library, which is used for ALAC decoding in Sony Xperia series 1, 5, and...

SUSE-SU-2022:2826-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - Update to version 2.36.5 bsc1201980: - Add support for PAC proxy in the WebDriver implementation. - Fix video playback when loaded through custom URIs, this fixes video playback in the Yelp documentation browser. - Fix...

SUSE-SU-2022:2821-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - Update to version 2.36.5 bsc1201980: - Add support for PAC proxy in the WebDriver implementation. - Fix video playback when loaded through custom URIs, this fixes video playback in the Yelp documentation browser. - Fix...

[SECURITY] Fedora 36 Update: golang-github-pact-foundation-1.5.1-7.fc36

Pact Go enables consumer driven contract testing, providing a mock service and DSL for the consumer project, and interaction playback and verification for t he service provider project...

[SECURITY] Fedora 35 Update: golang-github-pact-foundation-1.5.1-6.fc35

Pact Go enables consumer driven contract testing, providing a mock service and DSL for the consumer project, and interaction playback and verification for t he service provider project...

[SECURITY] Fedora 36 Update: golang-github-pact-foundation-1.5.1-6.fc36

Pact Go enables consumer driven contract testing, providing a mock service and DSL for the consumer project, and interaction playback and verification for t he service provider project...

CVE-2019-25071

A vulnerability was found in Apple iPhone up to 12.4.1. It has been declared as critical. Affected by this vulnerability is Siri. Playing an audio or video file might be able to initiate Siri on the same device which makes it possible to execute commands remotely. Exploit details have been...

The vulnerability of the Media Center application for playing multimedia content on Windows operating systems, which allows a hacker to escalate their privileges.

The vulnerability of the Media Center application for playing multimedia content on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Malicious code in spotify-playback (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5b571969d5440538db0bf7e7a9e055f152bee0b2f741e0f94ff3e4f92e881be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6260 Malicious code in spotify-playback (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5b571969d5440538db0bf7e7a9e055f152bee0b2f741e0f94ff3e4f92e881be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-4766 · Qualcomm · Snapdragon Connectivity +8

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform software affected versions not specified Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer...

Malicious code in web-playback-sdk-sample-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14ec9efa646e11150d914ed21af3d271495f5b12cb7e5d16bc00d4c6bbcb05d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7071 Malicious code in web-playback-sdk-sample-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14ec9efa646e11150d914ed21af3d271495f5b12cb7e5d16bc00d4c6bbcb05d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Wargaming World of Warships 安全漏洞

Wargaming World of Warships is a 3D massively multiplayer online role-playing shooter with a naval warfare theme from the first half of the 20th century by Wargaming Cyprus. A security vulnerability exists in Wargaming World of Warships version 0.11.4, which stems from a problem with the playback...

[SECURITY] Fedora 36 Update: golang-github-pact-foundation-1.5.1-5.fc36

Pact Go enables consumer driven contract testing, providing a mock service and DSL for the consumer project, and interaction playback and verification for t he service provider project...

TKVideoplayer 资源管理错误漏洞

TkVideoplayer is a video player for tkinter by Art/Paul Individual Developer in India. A security vulnerability exists in versions prior to TKVideoplayer 2.0.0, which stems from a memory issue when playing videos...

Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 91.8.0ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16 - 2022.4.0

Summary CVE-2022-28282, CVE-2021-38503, CVE-2022-22760, CVE-2021-38509, CVE-2022-22739, CVE-2022-26381, CVE-2022-22754, CVE-2021-43538, CVE-2022-22747, CVE-2021-38504, CVE-2022-22746, CVE-2022-26383, CVE-2022-22741, CVE-2022-26384, CVE-2022-22759, CVE-2022-22748, CVE-2021-43543, CVE-2022-1196,...