336 matches found
CVE-2022-32594
In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446207; Issue ID: ALPS07446207...
CVE-2021-25476
An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass the ASLR protection mechanism in TEE...
CVE-2021-25469
A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows arbitrary code execution...
CVE-2021-25468
A possible guessing and confirming a byte memory vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows attackers to read arbitrary memory address...
CVE-2020-11293
Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon...
CVE-2019-14123
Possible buffer overflow and over read possible due to missing bounds checks for fixed limits if we consider widevine HLOS client as non-trustable in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, Rennell, SC7180, SDX55,...
Minor update (2) for Vivaldi Desktop Browser 7.2
Download Vivaldi The following improvements were made since the first 7.2 minor update: Chromium Update to 134.0.6998.182 CVE-2025-2783 Crash Sending Tab VB-113521 Currency Widget The currency widget convert Japanese Yen and Chinese Yuan wrong VB-115291 LinuxMedia Not prompted to restart due to...
CVE-2024-43051
Information disclosure while deriving keys for a session for any Widevine use case...
CVE-2024-43051
Information disclosure while deriving keys for a session for any Widevine use case...
CVE-2024-43051 Improper Authorization in SPS-HLOS
Information disclosure while deriving keys for a session for any Widevine use case...
CVE-2024-43051
The CVE-2024-43051 entry describes an Information disclosure during session key derivation for Widevine use. Connected sources confirm this affects Qualcomm closed‑source components (CVE-2024-43051) and that the issue is listed in Android security bulletins with patch levels addressing these vuln...
CVE-2024-43051 Improper Authorization in SPS-HLOS
Information disclosure while deriving keys for a session for any Widevine use case...
OPENSUSE-SU-2024:0204-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 126.0.6478.126 boo1226504, boo1226205, boo1226933 CVE-2024-6290: Use after free in Dawn CVE-2024-6291: Use after free in Swiftshader CVE-2024-6292: Use after free in Dawn CVE-2024-6293: Use after free in Dawn CVE-2024-6100: Type...
Vulnerabilities fixed in Google Android and Samsung Mobile
Google has fixed vulnerabilities in Android. A malicious person could exploit the vulnerabilities to cause a denial-of-service cause or grant themselves elevated privileges to gain gain access to sensitive data. Successful exploitation requires the malicious party to trick the victim into followi...
CVE-2022-48336
Widevine Trusted Application TA 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resultant buffer overflow...
CVE-2022-48336
Widevine Trusted Application TA 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resultant buffer overflow...
CVE-2022-48336
Widevine Trusted Application TA 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resultant buffer overflow...
CVE-2022-48334
Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmverifykeys totallen+filenamelen integer overflow and resultant buffer overflow...