Lucene search
K

7 matches found

RedHat Linux
RedHat Linux
added 2026/04/28 6:49 a.m.2 views

freerdp: FreeRDP has a Heap-use-after-free in play_thread

A heap use after free has been discovered in FreeRDP. The RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after free in rdpsndtreatwave...

8.7CVSS5.2AI score0.00018EPSS
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2026/02/09 6:23 p.m.4 views

CVE-2026-24684

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after free in rdpsndtreatwave. This vulnerability is fixed in 3.22.0...

8.7CVSS5.6AI score0.00018EPSS
Exploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 8:14 a.m.5 views

CVE-2024-34736

In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is enabled. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.1AI score0.00054EPSS
Exploits0References1
NVD
NVD
added 2024/08/15 10:15 p.m.23 views

CVE-2024-34736

In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is enabled. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00054EPSS
Exploits0References2
OSV
OSV
added 2024/08/15 10:15 p.m.2 views

CVE-2024-34736

In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is enabled. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00054EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/08/15 9:56 p.m.17 views

CVE-2024-34736

In setupVideoEncoder of StagefrightRecorder.cpp, there is a possible asynchronous playback when B-frame support is enabled. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00054EPSS
Exploits0References2
CVE
CVE
added 2024/08/15 9:56 p.m.116 views

CVE-2024-34736

CVE-2024-34736 affects Android’s media stack, specifically the StagefrightRecorder.cpp setupVideoEncoder. When B-frame support is enabled, there is a potential for asynchronous playback that can enable local elevation of privilege without requiring additional execution privileges or user interact...

7.8CVSS6.8AI score0.00054EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder