CVE-2019-14016

Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053,...

CVE-2022-33282

Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback...

CVE-2022-40515

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms...

PT-2024-41642

Name of the Vulnerable Software and Affected Versions Qualcomm embedded platform firmware affected versions not specified Description A memory corruption issue exists in the Qualcomm embedded platform firmware related to the use of memory after it has been freed. This can occur during video...

About the security content of Apple TV 1.5.0.152 for Windows

About the security content of Apple TV 1.5.0.152 for Windows This document describes the security content of Apple TV 1.5.0.152 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred...

CVE-2024-43899

CVE-2024-43899 affects the Linux kernel’s DRM AMD display path. The vulnerability is a NULL pointer dereference in dcn20_resource.c that can cause a hang when MPV runs on a DCN401 dGPU, specifically during fullscreen playback after enabling fullscreen (double click). Affected component/function c...

PT-2024-5251

Name of the Vulnerable Software and Affected Versions Telegram for Android versions 10.14.4 and older Telegram for Android version 11.7.4 Description The issue is related to the incorrect handling of file extensions in received files, allowing an attacker to send malicious apps disguised as video...

[SECURITY] Fedora 40 Update: qt5-qtmultimedia-5.15.14-1.fc40

The Qt Multimedia module provides a rich feature set that enables you to easily take advantage of a platforms multimedia capabilites and hardware. This ranges from the playback and recording of audio and video content to the use of available devices like cameras and radios...

GHSA-8C85-4RR5-CHR4 Cross-site Scripting (XSS) in DemoBundle/ezdemo bundled VideoJS

This Security Advisory is about a vulnerability in VideoJS, which is bundled in DemoBundle and the ezdemo legacy extension. Older releases of VideoJS contain an XSS vulnerability in the Flash-based video player. This is bundled in DemoBundle, and in the Legacy "ezdemo" and "ezdemo-ls-extension"...

ROS-2-1169

2.1169 VLC vulnerability CVE-2020-13428 1. Vulnerability description: Vulnerability in VLC 3.0.11 player The vulnerability could cause a buffer overflow in the hxxxAnnexBtoxVC function. The vulnerability potentially allows to organize attacker's code execution when playing specially formatted...

SUSE-SU-2023:4828-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.42.3 bsc1217844: - Fix flickering while playing videos with DMA-BUF sink. - Fix color picker being triggered in the inspector when typing 'tan'. - Do not special case the 'sans' font family name. - Fix build failure with...

SUSE-SU-2023:4824-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.42.3 bsc1217844: - Fix flickering while playing videos with DMA-BUF sink. - Fix color picker being triggered in the inspector when typing 'tan'. - Do not special case the 'sans' font family name. - Fix build failure with...

Security update for vlc (moderate)

openSUSE Security Update: Security update for vlc Announcement ID: openSUSE-SU-2023:0366-1 Rating: moderate References: 1206142 Cross-References: CVE-2022-37434 CVE-2022-41325 CVE-2023-5217 CVSS scores: CVE-2022-37434 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-37434 SUSE: 8.1...

PUB-A-270965644

In Gs101Pipeline::Update of gs101displaycolorpipeline.cc, there is a possible device reboot when watching a video due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2022-33282

Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback...

Integer overflow

Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback...

CVE-2022-33282 Integer overflow to buffer overflow in Automotive Multimedia

Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback...

CVE-2022-33282

CVE-2022-33282 affects Qualcomm Automotive Multimedia (chipset) where an integer overflow during IOCTL calls in video playback causes memory corruption. Root cause: overflow turning into buffer overflow within IOCTL handling. Impact per CVSS is high on confidentiality, integrity, and availability...

CVE-2022-33282 Integer overflow to buffer overflow in Automotive Multimedia

Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback...

PT-2023-13287 · Unknown · Automotive Multimedia

Name of the Vulnerable Software and Affected Versions: Automotive Multimedia affected versions not specified Description: The issue is related to memory corruption in Automotive Multimedia, caused by an integer overflow leading to a buffer overflow during IOCTL calls in video playback...