Double free

Lotos WebServer v0.1.1 was discovered to contain a Use-After-Free UAF vulnerability via the responseappendstatusline function at /lotos/src/response.c...

Double free

media-server v1.0.0 was discovered to contain a Use-After-Free UAF vulnerability via the sipuacstoptimer function at /uac/sip-uac-transaction.c...

Double free

gpac v2.2.1 was discovered to contain a Use-After-Free UAF vulnerability via the dasherconfigurepid function at /src/filters/dasher.c...

CVE-2024-24266

gpac v2.2.1 was discovered to contain a Use-After-Free UAF vulnerability via the dasherconfigurepid function at /src/filters/dasher.c...

CVE-2024-24263

Lotos WebServer v0.1.1 was discovered to contain a Use-After-Free UAF vulnerability via the responseappendstatusline function at /lotos/src/response.c...

CVE-2024-24260

CVE-2024-24260 refers to a Use-After-Free (UAF) in media-server v1.0.0, triggered via the function sip_subscribe_remove in /uac/sip-uac-subscribe.c. The issue is described consistently across multiple sources (NVD, Red Hat, OSV, CVE lists) as a memory corruption vulnerability with an impact on av...

CVE-2024-24260

media-server v1.0.0 was discovered to contain a Use-After-Free UAF vulnerability via the sipsubscriberemove function at /uac/sip-uac-subscribe.c...

CVE-2024-24263

Lotos WebServer v0.1.1 contains a Use-After-Free (UAF) vulnerability in the function response_append_status_line (file /lotos/src/response.c). Root cause: memory reuse after freeing, enabling potential server instability or crashes. Impact: high availability (per CVSS vector AV:N/AC:L/PR:N/UI:N/S...

CVE-2024-24262

CVE-2024-24262 affects media-server v1.0.0 with a Use-After-Free in sip_uac_stop_timer ( /uac/sip-uac-transaction.c ). Root cause: UAF in the timer handling path. Impact stated as high availability risk (network-exposed, no authentication, no user interaction). Exploitation details are not provid...

CVE-2024-24266

gpac v2.2.1 was discovered to contain a Use-After-Free UAF vulnerability via the dasherconfigurepid function at /src/filters/dasher.c...

Design/Logic Flaw

The iaware module has a Use-After-Free UAF vulnerability. Successful exploitation of this vulnerability may affect the system functions...

CVE-2023-49142 multimedia audio has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer...

CVE-2023-49142 multimedia audio has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer...

CVE-2023-49135 multimedia player has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer...

CVE-2023-49135 multimedia player has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer...

CVE-2023-48360 multimedia player has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer...

CVE-2023-48360 multimedia player has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer...

CVE-2023-47857 multimedia camera has a UAF vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer...

CVE-2023-46769

Use-After-Free UAF vulnerability in the dubai module. Successful exploitation of this vulnerability will affect availability...

CVE-2023-46769

CVE-2023-46769 describes a Use-After-Free (UAF) vulnerability in the dubai module, with the primary impact stated as availability disruption. The linked Red Hat/NVD entries frame it as a UAF affecting availability, and multiple sources reference Huawei/HarmonyOS and the dubai module, but the prov...