Mozilla: WebRTC permission prompt could have been bypassed by a compromised content process

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox 78...

chromium-browser: Inappropriate implementation in WebRTC

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream...

The vulnerability of the WebRTC technology implemented in Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially...

chromium-browser: Inappropriate implementation in WebRTC

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream...

Google Chrome Buffer Overflow Vulnerability (CNVD-2020-43472)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A heap buffer overflow vulnerability exists in WebRTC in versions prior to Google Chrome 84.0.4147.89, which can be exploited by an attacker to execute arbitrary co...

UBUNTU-CVE-2020-12424

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox 78...

Meetecho Janus Buffer Overflow Vulnerability (CNVD-2020-53120)

Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. A buffer overflow vulnerability exists in the 'janusgetcodecfrompt' function in the utils.c file in Meetecho Janus 0.10.0 and earlier versions, which stems from the program failing to properly check boundaries. A remote...

UBUNTU-CVE-2020-6467

Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

usrsctp: Buffer overflow in AUTH chunk input validation

A flaw was found in Mozilla Firefox and Thunderbird. When parsing and validating SCTP chunks in WebRTC a memory buffer overflow could occur leading to memory corruption and an exploitable crash. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

Meetecho Janus Competitive Conditions Issue Vulnerability (CNVD-2020-19843)

Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. A Competitive Conditions Issue vulnerability exists in Meetecho Janus 0.9.1 and prior versions. The vulnerability stems from improper handling of concurrent access when concurrent code requires mutually exclusive access ...

Meetecho Janus Competitive Conditions Issue Vulnerability

Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. Meetecho Janus suffers from a Contested Condition Issue vulnerability that can be exploited by an attacker to cause certain references to be prematurely or excessively released...

Unspecified Vulnerability in Meetecho Janus (CNVD-2020-19849)

Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. Meetecho Janus has a security vulnerability, and no details of the vulnerability are provided at this time...

Meetecho Janus has an unspecified vulnerability

Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. Meetecho Janus has a security vulnerability discovered in Janus via 0.9.1. janusaudiobridge.c has a double mutex lock unlock when listing private rooms in AudioBridge. No details of the vulnerability are provided at this...

chromium-browser: Out of bounds write in WebRTC

Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream...

The vulnerability of the Firefox browser’s WebRTC extension, which allows a perpetrator to compromise data integrity

The vulnerability of the Firefox browser’s WebRTC extension is related to a display-related error in the origin domain. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

UBUNTU-CVE-2020-6389

Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream...

UBUNTU-CVE-2019-13722

Inappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

chromium-browser: Use-after-free in WebRTC

Use after free in WebRTC in Google Chrome prior to 77.0.3865.120 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Mozilla: Stack buffer overflow in WebRTC networking

A flaw was discovered in Mozilla Firefox and Thunderbird where a fixed-stack buffer overflow could occur during WebRTC signalling. The vulnerability could lead to an exploitable crash or leak data...

Google Chrome WebRTC Resource Management Error Vulnerability

Google Chrome is a web browser from Google, Inc. WebRTC is a component of the browser that supports real-time voice or video conversations. A resource management error vulnerability exists in WebRTC in versions of Google Chrome prior to 77.0.3865.120. An attacker can exploit this vulnerability to...