3699 matches found
HP Poly Voice Unauthenticated Remote Code Execution
CVE-2026-0826 is a critical unauthenticated stack-based buffer overflow vulnerability affecting all models in the VVX series VVX 150, VVX 250, VVX 350, and VVX 450, as well as three models from the Trio IP Conference series Trio 8800, Trio 8500, and Trio 8300. A remote attacker can leverage...
PT-2026-45420
Name of the Vulnerable Software and Affected Versions HP Poly VVX 150 HP Poly VVX 250 HP Poly VVX 350 HP Poly VVX 450 HP Poly Trio 8300 HP Poly Trio 8500 HP Poly Trio 8800 Description An unauthenticated stack-based buffer overflow exists in HP Poly Voice products on the Linux platform during the...
CVE-2026-0826: Stack-based Buffer Overflow
In certain scenarios when the admin has enabled Interactive Connectivity Establishment ICE, a buffer overflow could enable remote code execution on Poly Voice products on the Linux platform...
screenenv (0.0.1.dev0), simple-voice-chat (>=4.0.1, <=4.2.3) +1 more potentially affected by CVE-2026-48545 via gradio (5.23.1)
gradio PYPI version 5.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - screenenv 0.0.1.dev0 - simple-voice-chat =4.0.1, =4.2.3 - zmp-knowledge-store-mcp-server 0.1.0 Source cves: CVE-2026-48545 Source advisory:...
screenenv (0.0.1.dev0), simple-voice-chat (>=4.0.1, <=4.2.3) +1 more potentially affected by CVE-2026-48545 via gradio (5.23.1)
gradio PYPI version 5.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - screenenv 0.0.1.dev0 - simple-voice-chat =4.0.1, =4.2.3 - zmp-knowledge-store-mcp-server 0.1.0 Source cves: CVE-2026-48545 Source advisory:...
Company bragged phone mics could listen to conversations. They couldn’t.
A media company and two of its marketing partners have been fined for selling a service which, they said, listened in to people's conversations through their phones. Actually they did nothing of the sort. Most people have worried at some point that their phone has been listening to them through t...
voice-agent-tequity (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-44209 via banks (2.2.0)
banks PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on banks and may be impacted: - voice-agent-tequity =0.1.0, =0.1.1 Source cves: CVE-2026-44209 Source advisory: MEND:CVE-2026-44209...
CVE-2026-42437
OpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voice-call realtime WebSocket path that accepts oversized frames without proper validation. Remote attackers can send oversized WebSocket frames to cause service unavailability for deployments exposing th...
Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway
Summary Security Vulnerabilities affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-44288 DESCRIPTION: protobufjs compiles protobuf definitions into JavaScript JS functions. Prior to 7.5.6 and 8.0.2, protobufjs includes a minimal UTF-8 decoder...
DASM: Domain-Aware Sharpness Minimization for Multi-Domain Voice Stream Steganalysis
The growing use of information hiding in network streaming media for covert communication poses a significant security threat, necessitating the development of robust detection technologies. However, existing steganalysis methods for network voice streams mostly rely on data distributions in...
AI Voice Cloning: The Technology Behind It, Who’s Building It, and Where It’s Headed
Explore AI voice cloning technology, leading companies, real-world uses, ethical risks, and future trends shaping synthetic voices...
voice-agent-tequity (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-44209 via banks (2.2.0)
banks PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on banks and may be impacted: - voice-agent-tequity =0.1.0, =0.1.1 Source cves: CVE-2026-44209 Source advisory: OSV:GHSA-GPHH-9Q3H-JGPP...
voice-agent-tequity (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-44209 via banks (2.2.0)
banks PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on banks and may be impacted: - voice-agent-tequity =0.1.0, =0.1.1 Source cves: CVE-2026-44209 Source advisory: GHSA-GPHH-9Q3H-JGPP...
voice-agent-tequity (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-44209 via banks (2.2.0)
banks PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on banks and may be impacted: - voice-agent-tequity =0.1.0, =0.1.1 Source cves: CVE-2026-44209 Source advisory: SNYK:PYTHON-BANKS-16635495...
Telecom MG Code Execution Root Privileges
The vulnerability of the VoIP gateway software of Telecom MG is related to the lack of measures taken to neutralize special elements used in operating system teams. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...
Telecom MG Code Execution Root Privileges
The vulnerability of the VoIP gateway software of Telecom MG is related to the lack of measures taken to neutralize special elements used in operating system teams. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...
Telecom MG Code Execution Root Privileges
The vulnerability of the VoIP gateway software of Telecom MG is related to the lack of measures taken to neutralize special elements used in operating system teams. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...
Allocation of Resources Without Limits or Throttling
Overview @openclaw/voice-call is an OpenClaw voice-call plugin Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the voice-call realtime WebSocket path when oversized WebSocket frames are accepted without proper validation. An attacker ca...
CVE-2026-42437
OpenClaw versions 2026.4.9 before 2026.4.10 contain a denial of service vulnerability in the voice-call realtime WebSocket path that accepts oversized frames without proper validation. Remote attackers can send oversized WebSocket frames to cause service unavailability for deployments exposing th...