1051 matches found
CVE-2022-41741
NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngxhttpmp4module that might allow a local attacker to corrupt NGINX worker memory, resulting in...
PT-2022-5185
Name of the Vulnerable Software and Affected Versions NGINX Open Source versions 1.23.2 and 1.22.1 and earlier NGINX Open Source Subscription versions R2 P1 and R1 P1 and earlier NGINX Plus versions R27 P1 and R26 P1 and earlier Description The issue is related to a buffer-over-read vulnerability...
The vulnerability of the Video microprogramming system component in Qualcomm’s embedded chips allows a hacker to trigger a service failure.
The vulnerability of the Video microprogramming software component in Qualcomm’s embedded chips relates to the lack of checks for buffer length and reading beyond the memory boundary when processing MP4 files. Exploiting this vulnerability can allow a remote attacker to cause service interruption...
Critical WhatsApp Bugs Could Have Let Attackers Hack Devices Remotely
WhatsApp has released security updates to address two flaws in its messaging app for Android and iOS that could lead to remote code execution on vulnerable devices. One of them concerns CVE-2022-36934 CVSS score: 9.8, a critical integer overflow vulnerability in WhatsApp that results in the...
Critical WhatsApp vulnerabilities patched: Check you've updated!
WhatsApp has fixed two remote code execution vulnerabilities in its September update, according to its security advisory. These could have allowed an attacker to remotely access a device and execute commands from afar. These versions of WhatsApp are affected by at least one of the vulnerabilities...
Vulnerabilities fixed in WhatsApp
Two vulnerabilities have been fixed in WhatsApp. The vulnerability with reference CVE-2022-36934 allows a remote malicious person to able to execute arbitrary code during a video call. The vulnerability with attribute CVE-2022-27492 allows a remote malicious person to remotely able to execute...
CVE-2022-27492
An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file...
CVE-2022-27492
An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file...
Integer overflow
An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file...
CVE-2022-27492
An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file...
PT-2022-18452 · Meta · Whatsapp
Name of the Vulnerable Software and Affected Versions: WhatsApp affected versions not specified Description: An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file. Recommendations: At the moment, there is no information about a newer version...
CVE-2022-34108
An issue in the Feature Navigator of Micro-Star International MSI Feature Nagivator v1.0.1808.0901 allows attackers to cause a Denial of Service DoS via a crafted image or video file...
CVE-2022-34108
An issue in the Feature Navigator of Micro-Star International MSI Feature Nagivator v1.0.1808.0901 allows attackers to cause a Denial of Service DoS via a crafted image or video file...
PT-2022-17789 · WordPress · All-In-One Video Gallery
Name of the Vulnerable Software and Affected Versions: All-in-One Video Gallery plugin for WordPress versions up to, and including 2.6.0 Description: The issue allows unauthenticated users to download sensitive files hosted on the affected server and forge requests to the server via the dl...
CVE-2022-22059
Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
Memory corruption
Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...
GStreamer 输入验证错误漏洞
GStreamer is a set of frameworks for processing streaming media. A security vulnerability exists in GStreamer version 1.16.2, which is caused by an integer overflow in the avidemux element of the gstavidemuxinvert function, which allows heap overwriting when parsing avi files, and can be exploite...
The vulnerability of the mpeg_mux_write_packet function in the libavformat/mpegenc.c component of the FFmpeg multimedia library allows a attacker to cause a service failure.
The vulnerability of the mpegmuxwritepacket function in the libavformat/mpegenc.c component of the FFmpeg multimedia library relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to cause a service failure by using a specially created AVI file...
Samsung Video Player Privilege Mismanagement Vulnerability
Samsung Video Player is a built-in system video player application optimized for the Samsung Galaxy series from Samsung South Korea. A privilege mismanagement vulnerability exists in Samsung Video Player versions prior to 7.3.15.30, which stems from Samsung Video Player's faulty privilege...