CVE-2024-47167: Server-Side Request Forgery (SSRF)

Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to Server-Side Request Forgery SSRF in the /queue/join endpoint. Gradio’s asyncsaveurltocache function allows attackers to force the Gradio server to send HTTP requests to user-controlled URLs. This...

PT-2024-32450

Name of the Vulnerable Software and Affected Versions Gradio versions prior to 5 Description This issue relates to Server-Side Request Forgery SSRF in the "/queue/join" endpoint. Gradio’s async save url to cache function allows attackers to force the Gradio server to send HTTP requests to...

CVE-2023-50470

A cross-site scripting XSS vulnerability in the component admin Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-50470

A cross-site scripting XSS vulnerability in the component admin Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2023-31572

Name of the Vulnerable Software and Affected Versions SeaCMS version 12.8 Description A cross-site scripting XSS vulnerability in the component admin Video.php of SeaCMS allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations For SeaCMS version 12.8,...

PT-2023-13804 · Qualcomm · Snapdragon +141

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in a video component due to a double free error that occurs when playing a 3gp clip containing invalid metadata...

SUSE CVE-2023-0930

Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

PT-2023-1531

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 110.0.5481.177 Microsoft Edge affected versions not specified Description A heap buffer overflow issue in the Video component of Google Chrome and Microsoft Edge allows a remote attacker to potentially exploit...

PT-2023-1515

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 110.0.5481.177 Microsoft Edge affected versions not specified Description The issue is related to a use after free vulnerability in the Video component of Google Chrome and Microsoft Edge browsers. This...

PT-2023-33542 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to a use-after-free error in the tegra-video component of the Linux Kernel. This error was introduced in version v5.10 and is fixed in version v6.0.18. The actual impact...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google Inc. There is a security vulnerability in Unisoc components Video in Google Android 11, there is no information about the vulnerability at the moment, please stay tuned to CNNVD or the manufacturer's announcement...

Simple DirectMedia Layer Integer Overflow

The vulnerability of the video component in the Simple DirectMediaLayer multimedia library’s SDLblitcopy.c file is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service...

PT-2021-7408 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to a buffer over-read when processing avi files, which can lead to information disclosure. This is due to a lack of buffer length checks and...

PT-2021-9194

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description A race condition occurs when calling user space ioctl from two different threads, which can result in a use after free issue in the video component of Snapdragon products, includi...

PT-2020-6527

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 85.0.4183.102 Description The issue is related to a use after free in the video component, which could allow a remote attacker who has compromised the renderer process to potentially perform a sandbox escape. Th...

Qualcomm SM8150 Video Buffer Overflow Vulnerability

The Qualcomm SM8150 is a central processing unit CPU product from Qualcomm Incorporated, U.S.A. Video is one of its video components. A buffer overflow vulnerability exists in Video in the Qualcomm SM8150. A remote attacker could exploit this vulnerability to execute arbitrary code on the system ...

CVE-2018-5912

Potential buffer overflow in Video due to lack of input validation in input and output values in Snapdragon Automobile, Snapdragon Mobile in MSM8996AU, SD 450, SD 625, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660...

Google Android Video Component Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Video is one of the video components. An information disclosure vulnerability exists in the Video component of Android, which is caused by the program forcing a Boolean variable to...

CVE-2018-11287

In Snapdragon Automobile, Mobile, Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SD 850, SDA660, SDM429, SDM439, SDM630, SDM632, SDM636, SDM660, SDM710,...

Google Android Video Buffer Overflow Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Video is one of the video components. A buffer overflow vulnerability exists in Video in Android. An attacker can exploit this vulnerability to cause a page fault...