CVE-2024-53019

CVE-2024-53019 is a buffer over-read in Qualcomm closed-source components of the Data Network Stack during RTP packet processing. The root cause is an improper RTP header length handling for the number of contributing sources, leading to information disclosure. The CVSSv3.1 base score is 8.2 (Hig...

CVE-2024-53019 Buffer Over-read in Data Network Stack & Connectivity

Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources...

PT-2025-23578 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Information disclosure may occur while decoding the RTP packet with invalid header extension from network. Recommendations: At the moment, there is no information about a newer version that...

CVE-2022-40524

Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service...

CVE-2013-1176

The DSP card on Cisco TelePresence MCU 4500 and 4501 devices before 4.32.30, TelePresence MCU MSE 8510 devices before 4.32.30, and TelePresence Server before 2.31.55 does not properly validate H.264 data, which allows remote attackers to cause a denial of service device reload via crafted RTP...

CVE-2019-15639

main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a call and cause a crash in a specific scenario...

CVE-2013-3393

The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service process crash and call disconnection via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117...

Cisco IP Phones Improper Input Validation (CVE-2008-4444)

Cisco Unified IP Phone aka SIP phone 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service device reboot or possibly execute arbitrary code via a Realtime Transport Protocol RTP packet with malformed headers. This...

Linux Distros Unpatched Vulnerability : CVE-2016-7935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The RTP parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:rtpprint. CVE-2016-7935 Note that Nessus relies on the presence of the package as...

PT-2025-23577

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources. Recommendations At the moment, there is no information about a...

The vulnerability of the SPRT sniffer of the Wireshark computer network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of the SPRT sniffer in the Wireshark computer network traffic analyzer relates to access to an uninitialized pointer. Exploiting this vulnerability can allow a hacker to cause a service failure by sending specially crafted RTP packets...

PJSIP: Heap Buffer Overflow

Background PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Description Please review the CVE identifier referenced below for details. Impact Please review the CVE identifier...

[SECURITY] Fedora 40 Update: wireshark-4.2.7-1.fc40

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

PT-2025-28432

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Information disclosure occurs while decoding RTP packet payload when a UE receives the RTP packet from the network. Recommendations: At the moment, there is no information about a newer...

CVE-2024-34592

Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction is required for triggering this vulnerability...

SUSE CVE-2024-35434

Irontec Sngrep v1.8.1 was discovered to contain a heap buffer overflow via the function rtpcheckpacket at /sngrep/src/rtp.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted SIP packet...

Irontec Sngrep 安全漏洞

Irontec Sngrep is a tool from Irontec for displaying SIP call message streams from endpoints. A security vulnerability exists in Irontec Sngrep version v1.8.1, which originates from a heap buffer overflow in the rtpcheckpacket function on /sngrep/src/rtp.c, which allows an attacker to trigger a...

RHEL 5 : tcpdump (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - tcpdump: SMB data printing mishandled CVE-2018-10105 - The AH parser in tcpdump before 4.9.0 has a buffer...

RHEL 6 : tcpdump (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - tcpdump: SMB data printing mishandled CVE-2018-10105 - The AH parser in tcpdump before 4.9.0 has a buffer...

Fedora 40 : baresip / libre (2024-a63e807450)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-a63e807450 advisory. Baresip v3.10.1 2024-03-12 Security Release possible Denial of Service: A wrong or manipulated incoming RTP Timestamp can cause the baresip process to hang...