UBUNTU-CVE-2023-52806

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix possible null-ptr-deref when assigning a stream While AudioDSP drivers assign streams exclusively of HOST or LINK type, nothing blocks a user to attempt to assign a COUPLED stream. As supplied substream instance ma...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from bpf allowing access to protoops at the mptcp level from a tcp substream range...

Bento4 安全漏洞

Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in the Bento4 v1.6.0-641-2-g1529b83 version that originates from a denial of service issue in the AP4SubStream::AP4SubStream method of the Ap4ByteStream.cpp file...

kernel: ALSA: usb-audio: Cancel pending work at closing a MIDI substream

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Cancel pending work at closing a MIDI substream At closing a USB MIDI output substream, there might be still a pending work, which would eventually access the rawmidi runtime object that is being released. For...

kernel: ASoC: DPCM: Don't pick up BE without substream

In the Linux kernel, the following vulnerability has been resolved: ASoC: DPCM: Don't pick up BE without substream When DPCM tries to add valid BE connections at dpcmaddpaths, it doesn't check whether the picked BE actually supports for the given stream direction. Due to that, when an asymmetric ...

kernel: ASoC: DPCM: Don't pick up BE without substream

In the Linux kernel, the following vulnerability has been resolved: ASoC: DPCM: Don't pick up BE without substream When DPCM tries to add valid BE connections at dpcmaddpaths, it doesn't check whether the picked BE actually supports for the given stream direction. Due to that, when an asymmetric ...

SUSE CVE-2018-13302

In FFmpeg 4.0.1, improper handling of frame types other than EAC3FRAMETYPEINDEPENDENT that have multiple independent substreams in the handleeac3 function in libavformat/movenc.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to a denial of service or...

kernel: ALSA: usb-audio: Cancel pending work at closing a MIDI substream

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Cancel pending work at closing a MIDI substream At closing a USB MIDI output substream, there might be still a pending work, which would eventually access the rawmidi runtime object that is being released. For...

GSD-2022-1003640 ALSA: usb-audio: Cancel pending work at closing a MIDI substream

ALSA: usb-audio: Cancel pending work at closing a MIDI substream This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003631 ALSA: pcm: Check for null pointer of pointer substream before dereferencing it

ALSA: pcm: Check for null pointer of pointer substream before dereferencing it This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by comm...

GSD-2022-1003427 ALSA: usb-audio: Cancel pending work at closing a MIDI substream

ALSA: usb-audio: Cancel pending work at closing a MIDI substream This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003425 ALSA: pcm: Check for null pointer of pointer substream before dereferencing it

ALSA: pcm: Check for null pointer of pointer substream before dereferencing it This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commi...

GSD-2022-1003160 ALSA: usb-audio: Cancel pending work at closing a MIDI substream

ALSA: usb-audio: Cancel pending work at closing a MIDI substream This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1003120 ALSA: pcm: Check for null pointer of pointer substream before dereferencing it

ALSA: pcm: Check for null pointer of pointer substream before dereferencing it This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commi...

GSD-2022-1002848 ALSA: usb-audio: Cancel pending work at closing a MIDI substream

ALSA: usb-audio: Cancel pending work at closing a MIDI substream This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

UBUNTU-CVE-2021-39562

An issue was discovered in swftools through 20200710. A NULL pointer dereference exists in the function FileStream::makeSubStream located in Stream.cc. It allows an attacker to cause Denial of Service...

In function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel prtd is assigned substream->runtime->private_data. Later prtd is freed. However prtd is not sanitized and set to NULL resulting in a dangling pointer. There are other functions that access the same memory (substream->runtime->private_data) with a NULL check such as msm_pcm_volume_ctl_put() which means this freed memory could be used.

...

The vulnerability of the Linux operating system’s interrupt handler snd_cs5535audio_interrupt allows a hacker to trigger a service failure.

The vulnerability of the interrupt handler sndcs5535audiointerrupt in the Linux kernel’s sound/pci/cs5535audio/snd-cs5535audio.ko module arises due to the swapping of the null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure by connecting a CS5535 Audio...

Microsoft Excel Substream Parsing Integer Overflow

Added: 11/08/2011 CVE: CVE-2011-0097 OSVDB: 71758 Background Microsoft Excel, part of the Microsoft Office product suite, is a spreadsheet application for Windows and Macintosh platforms. Problem Microsoft Excel 2007 versions lacking the patch KB2464583 detailed in Microsoft Security Advisory...