PT-2025-10801 · Microsoft · Streaming Service +1

Name of the Vulnerable Software and Affected Versions: Microsoft Streaming Service affected versions not specified Description: The issue is related to a use after free condition in the Microsoft Streaming Service, allowing an authorized attacker to elevate privileges locally. Recommendations: At...

CVE-2025-24046: Use After Free

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

CVE-2025-24067: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

Microsoft Streaming Service 安全漏洞

Microsoft Streaming Service is a video platform from Microsoft Corporation USA. A security vulnerability exists in Microsoft Streaming Service. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

CVE-2025-24995: Heap-based Buffer Overflow

Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

Azure Linux 3.0 Security Update: kernel (CVE-2024-56694)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56694 advisory. - In the Linux kernel, the following vulnerability has been resolved: bpf: fix recursive lock when verdict...

SUSE CVE-2025-21835

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set...

DEBIAN-CVE-2025-21835

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set...

CVE-2025-21835

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set...

CVE-2025-21835

The CVE-2025-21835 issue affects the Linux kernel USB gadget f_midi MIDI Streaming descriptors. The root cause is incorrect bNumEmbMIDIJack and bLength values in MIDIStreaming endpoint descriptors, which can emit broken descriptors when the port count for IN/OUT differs, leaking uninitialized sta...

CVE-2025-21835 usb: gadget: f_midi: fix MIDI Streaming descriptor lengths

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set...

CVE-2025-21835 usb: gadget: f_midi: fix MIDI Streaming descriptor lengths

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an incorrect MIDI Streaming descriptor length setting...

Linux Distros Unpatched Vulnerability : CVE-2024-50175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: Remove usecount guard in stopstreaming The usecount check was introduced...

Linux Distros Unpatched Vulnerability : CVE-2024-50266

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: clk: qcom: videocc-sm8350: use HWCTRLTRIGGER for vcodec GDSCs A recent change in the venus...

1 Million Third-Party Android Devices Have a Secret Backdoor for Scammers

New research shows at least a million inexpensive Android devices—from TV streaming boxes to car infotainment systems—are compromised to allow bad actors to commit ad fraud and other cybercrime...

Linux Distros Unpatched Vulnerability : CVE-2024-43799

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect which executes untrusted...

Linux Distros Unpatched Vulnerability : CVE-2022-49247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: stk1160: If start stream fails, return buffers with VB2BUFSTATEQUEUED If the callback 'startstreaming' fails, then all queued buffers in the driver shoul...

SUSE CVE-2024-57834

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Fix a null-ptr-deref in vidtvmuxstopthread syzbot report a null-ptr-deref in vidtvmuxstopthread. 1 If dvb-mux is not initialized successfully by vidtvmuxinit in the vidtvstartstreaming, it will trigger null pointer...

Intel Data Streaming Accelerator System Failure

The vulnerability of the integrated data streaming accelerator Intel Data Streaming Accelerator Intel DSA in Intel microcomputer software is related to incorrect sequence of processor instructions. Exploiting this vulnerability can allow attackers to cause system failures...