CVE-2026-36433

Actions Semiconductor Media Player Utilities v.4.46 contains an arbitrary code execution vulnerability in its Production.dll and RdiskUpgrade.exe components. The firmware update toolkit performs no signature verification, checksum, or authentication , allowing a physically proximate attacker to l...

EUVD-2026-75164

An issue in Actions Semiconductor Co. Ltd Tool- Media Player Utilities v.4.46 allows a physically proximate attacker execute arbitrary code via the Production.dll and RdiskUpgrade.exe components...