Linux Distros Unpatched Vulnerability : CVE-2020-15969

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2019-9808

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain. The...

Google Chrome Resource Management Error Vulnerability (CNVD-2025-16954)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 138.0.7204.157, which stems from the presence of post-release reuse in WebRTC, which could lead to heap corruption. A remote attacker can exploit the vulnerability b...

DEBIAN-CVE-2025-7657

Use after free in WebRTC in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 138.0.7204.157, which stems from the presence of post-release reuse in WebRTC, which could lead to heap corruption. A remote attacker can exploit the vulnerability b...

libvpx: Double-free in libvpx encoder

A flaw was found in libvpx. A double-free issue can occur in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This can cause memory corruption and an exploitable crash...

libvpx: Double-free in libvpx encoder

A flaw was found in libvpx. A double-free issue can occur in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This can cause memory corruption and an exploitable crash...

libvpx: Double-free in libvpx encoder

A flaw was found in libvpx. A double-free issue can occur in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This can cause memory corruption and an exploitable crash...

libvpx: Double-free in libvpx encoder

A flaw was found in libvpx. A double-free issue can occur in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This can cause memory corruption and an exploitable crash...

libvpx: Double-free in libvpx encoder

A flaw was found in libvpx. A double-free issue can occur in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This can cause memory corruption and an exploitable crash...

CVE-2025-5262

A double-free could have occurred in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 139 and Thunderbird 128.11...

UBUNTU-CVE-2025-5262

A double-free could have occurred in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 139 and Thunderbird 128.11...

Astra Linux – Vulnerability in Chromium

The use of after-free in WebRTC in Google Chrome before version 130.0.6723.92 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

SUSE CVE-2024-10488

Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

The vulnerability of the WebRTC component in Google Chrome browsers, related to recording beyond the buffer limit, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC component in the Google Chrome web browser is related to memory corruption beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and cause service interruptions...

In the Linux kernel before 5.1.7 a device can be tracked by an attacker using the IP ID values the kernel produces for connection-less protocols (e.g. UDP and ICMP). When such traffic is sent to multiple destination IP addresses it is possible to obtain hash collisions (of indices to the counter array) and thereby obtain the hashing key (via enumeration). An attack may be conducted by hosting a crafted web page that uses WebRTC or gQUIC to force UDP traffic to attacker-controlled IP addresses.

...

DEBIAN-CVE-2024-5493

Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Italtel Embrace 安全漏洞

Italtel Embrace is a software-only, cloud-enabled Web application server from Italtel. It can be used to enable WebRTC services in a TLC network or as a standalone WebRTC service. A security vulnerability exists in Italtel Embrace version 1.6.4, which stems from the server's inability to properly...

PT-2024-3957 · Google +6 · Google Chrome +6

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 125.0.6422.141 Microsoft Edge affected versions not specified Description: The issue is related to a heap buffer overflow in the WebRTC implementation of Google Chrome and Microsoft Edge, allowing a remote...

io.antmedia.webrtc:ConferenceCall (>=2.6.1 <=2.8.2), io.antmedia.webrtc:StreamApp (>=2.6.0 <=2.8.2) potentially affected by CVE-2024-32656 via io.antmedia:ant-media-server (>=2.6.0 <=2.8.2)

io.antmedia:ant-media-server MAVEN version =2.6.0, =2.6.1, =2.6.0, =2.8.2 Source cves: CVE-2024-32656 Source advisory: OSV:GHSA-QWHW-HH9J-54F5...