21286 matches found
CVE-2022-49887 media: meson: vdec: fix possible refcount leak in vdec_probe()
In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: fix possible refcount leak in vdecprobe v4l2deviceunregister need to be called to put the refcount got by v4l2deviceregister when vdecprobe fails or vdecremove is called...
CVE-2025-23157
In the Linux kernel, the following vulnerability has been resolved: media: venus: hfiparser: add check to avoid out of bound access There is a possibility that initcodecs is invoked multiple times during manipulated payload from video firmware. In such case, if codecscount can get incremented to...
UBUNTU-CVE-2025-23157
In the Linux kernel, the following vulnerability has been resolved: media: venus: hfiparser: add check to avoid out of bound access There is a possibility that initcodecs is invoked multiple times during manipulated payload from video firmware. In such case, if codecscount can get incremented to...
CVE-2025-23158 media: venus: hfi: add check to handle incorrect queue size
In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add check to handle incorrect queue size qsize represents size of shared queued between driver and video firmware. Firmware can modify this value to an invalid large value. In such situation, emptyspace will be...
CVE-2025-23157
CVE-2025-23157 affects the Linux kernel’s media/venus/hfi_parser. Root cause: init_codecs can be invoked multiple times by manipulated video firmware payload, causing codecs_count to exceed MAX_CODEC_NUM and trigger an out-of-bounds access. The fix resets the counter to start from the beginning t...
CVE-2025-23157 media: venus: hfi_parser: add check to avoid out of bound access
In the Linux kernel, the following vulnerability has been resolved: media: venus: hfiparser: add check to avoid out of bound access There is a possibility that initcodecs is invoked multiple times during manipulated payload from video firmware. In such case, if codecscount can get incremented to...
CVE-2025-30422
A buffer overflow was addressed with improved input validation. This issue is fixed in AirPlay audio SDK 2.7.1, AirPlay video SDK 3.6.0.126, CarPlay Communication Plug-in R18.1. An attacker on the local network may cause an unexpected app termination...
CVE-2025-30422
A buffer overflow was addressed with improved input validation. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video SDK 3.6.0.126. An attacker on the local network may cause an unexpected app termination...
CVE-2025-24132
The issue was addressed with improved memory handling. This issue is fixed in AirPlay audio SDK 2.7.1, AirPlay video SDK 3.6.0.126, CarPlay Communication Plug-in R18.1. An attacker on the local network may cause an unexpected app termination...
CVE-2025-24132
The issue was addressed with improved memory handling. This issue is fixed in AirPlay audio SDK 2.7.1, AirPlay video SDK 3.6.0.126, CarPlay Communication Plug-in R18.1. An attacker on the local network may cause an unexpected app termination...
audio-video-metadata (>=0.1.0, <=0.1.7), fselect (>=0.3.2, <=0.8.11) +4 more potentially affected by unknown CVE via mp3-metadata (>=0.1.1, <=0.3.4)
mp3-metadata CARGO version =0.1.1, =0.1.0, =0.3.2, =0.1.2, =0.1.0, =0.2.2 Source cves: unknown CVE Source advisory: OSV:GHSA-927Q-G9W9-PM54...
The vulnerability of Microprogramming Software in Cisco SIP IP Phones like Cisco Video Phone 8875 and Cisco Desk Phone 9800 Series arises from insufficient protection for operational data, allowing unauthorized access to protected information by attackers.
The vulnerability of the microprogramming software used in Cisco SIP IP phones and Cisco Video Phone 8875 and Cisco Desk Phone 9800 Series lies in the insufficient protection of operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected informatio...
The vulnerability of the gf_hevc_read_sps_bs_internal function in the av_parsers.c file of the MP4Box packaging tool for the GPAC multimedia platform allows a hacker to cause a service failure.
The vulnerability of the gfhevcreadspsbsinternal function in the avparsers.c file of the MP4Box package of the GPAC multimedia platform is related to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure during...
Active Light Modulation to Counter Manipulation of Speech Visual Content
High-profile speech videos are prime targets for falsification, owing to their accessibility and influence. This work proposes Spotlight, a low-overhead and unobtrusive system for protecting live speech videos from visual falsification of speaker identity and lip and facial motion. Unlike...
Apple多款产品 安全漏洞
Apple FairPlay and others are products of Apple Inc.Apple FairPlay is a core component used to provide media playback capabilities to devices.Apple AirPlay audio SDK is an officially licensed development kit that allows third-party hardware products to integrate the AirPlay audio streaming protoc...
PT-2025-18328
Name of the Vulnerable Software and Affected Versions AirPlay audio SDK versions prior to 2.7.1 AirPlay video SDK versions prior to 3.6.0.126 CarPlay Communication Plug-in versions prior to R18.1 Description A buffer overflow issue was addressed by improving input validation. This could allow an...
Apple多款产品 安全漏洞
Apple FairPlay and others are products of Apple Inc.Apple FairPlay is a core component used to provide media playback capabilities to devices.Apple AirPlay audio SDK is an officially licensed development kit that allows third-party hardware products to integrate the AirPlay audio streaming protoc...
audio-video-metadata (>=0.1.0, <=0.1.7), fselect (>=0.3.2, <=0.8.11) +4 more potentially affected by unknown CVE via mp3-metadata (>=0.1.1, <=0.3.4)
mp3-metadata CARGO version =0.1.1, =0.1.0, =0.3.2, =0.1.2, =0.1.0, =0.2.2 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0027...
The vulnerability of the web interface of the AvertX network IP camera’s software allows a intruder to gain access to the video stream.
The vulnerability of the web interface of the AvertX network IP camera’s microprogramming software is related to the disclosure of information due to incompatibility. Exploiting this vulnerability can allow a remote attacker to gain access to the video stream...
