The vulnerability of the SPRT sniffer of the Wireshark computer network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the SPRT sniffer in the Wireshark computer network traffic analyzer relates to access to an uninitialized pointer. Exploiting this vulnerability can allow a hacker to cause a service failure by sending specially crafted RTP packets...

PT-2024-6607

Name of the Vulnerable Software and Affected Versions: Wireshark versions 4.2.0 through 4.0.5 Wireshark versions 4.0.0 through 4.0.15 Description: The issue is related to a crash in the SPRT dissector of Wireshark, which can be exploited to cause a denial of service. This can be achieved via pack...

Buffer Overflows

vlc is vulnerable to Buffer Overflows. A heap-based buffer overflow vulnerability allows an attacker to exploit a flaw in the way that VLC handles RTP packets to cause a buffer overflow. The attacker could then use the buffer overflow to execute arbitrary code on a vulnerable system, steal data, ...

PJSIP 缓冲区错误漏洞

PJSIP is a free and open source multimedia communications library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. A security vulnerability exists in PJSIP 2.11.1 and earlier versions, where there are multiple scenarios where certain incoming...

CVE-2019-17192

The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing RTP packets before a callee chooses to answer a call, which might make it easier for remote attackers to cause a denial of service or possibly have unspecified other impact via...

Code injection

DISPUTED The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing RTP packets before a callee chooses to answer a call, which might make it easier for remote attackers to cause a denial of service or possibly have unspecified other...

CVE-2019-17192

The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing RTP packets before a callee chooses to answer a call, which might make it easier for remote attackers to cause a denial of service or possibly have unspecified other impact via...

PT-2019-14995 · Signal +1 · Signal Private Messenger +1

Name of the Vulnerable Software and Affected Versions: Signal Private Messenger versions through 4.47.7 for Android Description: The issue is related to the WebRTC component in the Signal Private Messenger application, which processes videoconferencing RTP packets before a callee chooses to answe...

Digium Asterisk Denial of Service (CVE-2018-7285)

A denial of service vulnerability exists in Digium Asterisk. The vulnerability is due to improper handling of RTP packets. Successful exploitation of this vulnerability may result in a denial of service condition on the target service...

CVE-2018-6344

A heap corruption in WhatsApp can be caused by a malformed RTP packet being sent after a call is established. The vulnerability can be used to cause denial of service. It affects WhatsApp for Android prior to v2.18.293, WhatsApp for iOS prior to v2.18.93, and WhatsApp for Windows Phone prior to...

FaceTime - VCPDecompressionDecodeFrame Memory Corruption Exploit

Exploit for macOS platform in category dos / poc FaceTime - VCPDecompressionDecodeFrame Memory Corruption Exploit There is a heap corruption vulnerability in VCPDecompressionDecodeFrame which is called by FaceTime. This bug can be reached if a user accepts a call from a malicious peer. The issue...

FaceTime - 'VCPDecompressionDecodeFrame' Memory Corruption

There is a heap corruption vulnerability in VCPDecompressionDecodeFrame which is called by FaceTime. This bug can be reached if a user accepts a call from a malicious peer. The issue can be reproduced using the attached sequence of RTP packets. To reproduce the issue: 1 Build video-replay.c...

RTPproxy Denial of Service Vulnerability

RTPproxy is a software proxy. A security vulnerability exists in the NAT feature of RTPproxy 2.2.alpha.20160822 and earlier versions, which stems from the program failing to properly identify the IP address and port number of a legitimate recipient of RTP traffic. An attacker can exploit this...

CVE-2015-9048

In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packets...

Code injection

In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packets...

CVE-2015-9048

In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packets...

CVE-2015-9048

CVE-2015-9048 affects Qualcomm closed‑source components in Android CAF builds using the Linux kernel, where the vulnerability is in the processing of lost RTP packets due to input validation issues. The CNVD entry describes an unauthorized operation possibility as the impact. The provided documen...

CVE-2015-9048: Improper Input Validation

In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packets...

CVE-2017-3790

A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. The vulnerability is du...

CVE-2017-3790

A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS software could allow an unauthenticated, remote attacker to cause a reload of the affected system, resulting in a denial of service DoS condition. The vulnerability is du...