CVE-2019-20461

An issue was discovered on Alecto IVM-100 2019-11-12 devices. The device uses a custom UDP protocol to start and control video and audio services. The protocol has been partially reverse engineered. Based upon the reverse engineering, no password or username is ever transferred over this protocol...

EUVD-2025-28747

Malicious code in bioql PyPI...

CVE-2025-6524

A vulnerability classified as problematic has been found in 70mai 1S up to 20250611. This affects an unknown part of the component Video Services. The manipulation leads to improper authentication. Access to the local network is required for this attack to succeed. The complexity of an attack is...

CVE-2025-6524

A vulnerability classified as problematic has been found in 70mai 1S up to 20250611. This affects an unknown part of the component Video Services. The manipulation leads to improper authentication. Access to the local network is required for this attack to succeed. The complexity of an attack is...

CVE-2025-6524 70mai 1S Video Services improper authentication

A vulnerability classified as problematic has been found in 70mai 1S up to 20250611. This affects an unknown part of the component Video Services. The manipulation leads to improper authentication. Access to the local network is required for this attack to succeed. The complexity of an attack is...

CVE-2025-6524

The CVE-2025-6524 entry concerns 70mai 1S devices (up to 20250611) with a vulnerability in the Video Services component. The issue is described as an improper authentication flaw that requires access to the local network, with attack complexity rated as HIGH. Public disclosure of the exploit is n...

CVE-2025-6524 70mai 1S Video Services improper authentication

A vulnerability classified as problematic has been found in 70mai 1S up to 20250611. This affects an unknown part of the component Video Services. The manipulation leads to improper authentication. Access to the local network is required for this attack to succeed. The complexity of an attack is...

CVE-2025-6524: Improper Authentication

A vulnerability classified as problematic has been found in 70mai 1S up to 20250611. This affects an unknown part of the component Video Services. The manipulation leads to improper authentication. Access to the local network is required for this attack to succeed. The complexity of an attack is...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from information leakage in audio when accessing AVCS services from an ADSP payload...

The Promise and Peril of 5G

The next generation of mobile cellular technology known as fifth-generation wireless 5G is hitting a peak in the hype cycle, emerging as a major theme/5G.aspx at the Consumer Electronics Show CES this week. Wireless carriers are investing billions of dollars into the technology, which requires a...

Qualcomm Video Services Data Compromise

The vulnerability of Qualcomm Video Services component in the Android operating system arises from an operation that occurs outside the buffer in memory when playing ASF files. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibilit...

Qualcomm Video Services Data Compromise

The vulnerability of Qualcomm Video Services component in the Android operating system arises from an operation that occurs outside the buffer in memory when processing ID3 metadata. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...

Qualcomm Video Services Data Compromise

The vulnerability of Qualcomm Video Services on the Android operating system is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Qualcomm Video Services Buffer Overflow

The vulnerability of the videofmtmp4rprocessatomavc1 function in the Qualcomm Video Services component of the Android operating system is related to insufficient input data validation. Exploiting this vulnerability can allow an attacker to cause buffer overflows or execute arbitrary code...

PT-2017-3657

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 Description: A buffer over-read can occur when parsing a private frame in an ID3 tag, potentially allowing a remote attacker to impact the confidentiality, integrity, and availability ...

PT-2017-3694

Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD...