CVE-2024-10648

CVE-2024-10648 describes a path traversal vulnerability in the Gradio Audio component of gradio-app/gradio, present in version git 98cbcae. The underlying issue allows an attacker to control the audio file format and delete arbitrary file content by manipulating the output format, potentially res...

CVE-2024-10648 Path Traversal in gradio-app/gradio

A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. This vulnerability allows an attacker to control the format of the audio file, leading to arbitrary file content deletion. By manipulating the output format, an attacker can reset...

Gradio 安全漏洞

Gradio is an open source Python library from Gradio Open Source, a method for demonstrating machine learning models through a friendly web interface. A security vulnerability exists in Gradio version 98cbcae, which stems from a path traversal vulnerability in the Gradio Audio component, which...

Elevation of Privilege Vulnerability in Multiple Apple Products (CNVD-2025-19516)

Apple macOS Sequoia is an operating system from Apple in the U.S. Apple macOS Ventura is a desktop operating system from Apple in the U.S. Apple macOS Sonoma is an operating system from Apple. An elevation of privilege vulnerability exists in multiple Apple products and is caused due to a logic...

The vulnerability of the Audio component in Google Chrome and Microsoft Edge browsers allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the Audio component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, execute arbitrary code, or cause a service...

The vulnerability of the Audio component in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability of the Audio component in Microsoft Edge and Google Chrome lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to expose sensitive information through specially created PDF files...

PT-2024-4244 · Google +6 · Google Chrome +6

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 126.0.6478.54 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in the Audio component, which could allow a remote attacker to exploit heap corruption via a...

PT-2024-12391 · Qualcomm · 205 Mobile Firmware +282

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the Audio component while processing the RT proxy port register driver. No information is provided about the...

PT-2024-12393 · Audio · Audio

Name of the Vulnerable Software and Affected Versions: Audio affected versions not specified Description: The issue is related to memory corruption in the Audio component when processing IIR config data from the AFE calibration block. Recommendations: At the moment, there is no information about ...

PT-2024-12389 · Unknown · Asm Driver

Name of the Vulnerable Software and Affected Versions: ASM driver affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the Audio component when the callback function of the ASM driver is invoked. This can potentially cause disruptions in audio...

PT-2024-12394 · Qualcomm · 9206 Lte Modem Firmware +106

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the Audio component when processing calibration data returned from the ACDB loader. No information is provided...

OpenHarmony Resource Management Error Vulnerability

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony version v3.2.2 and earlier versions, which originates from the reuse of a multimedia audio component pointer after...

PT-2024-12421 · Adsp · Adsp

Name of the Vulnerable Software and Affected Versions: ADSP affected versions not specified Description: The issue is related to memory corruption in the Audio component of ADSP when a memory map command is executed consecutively. Recommendations: At the moment, there is no information about a...

CVE-2023-48697 Azure RTOS USBX Remote Code Execution Vulnerability

Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to memory buffer and pointer vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in...

PT-2023-24172 · Qualcomm · Snapdragon +125

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the Audio component when running an invalid audio recording from ADSP. No information is provided about the...

PT-2023-24162 · Qualcomm · Snapdragon +133

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue involves memory corruption in the audio component when a callback function in the driver is invoked from the ADSP. Recommendations: At the moment, there is no information...

PT-2023-24164 · Audio · Audio

Name of the Vulnerable Software and Affected Versions: Audio affected versions not specified Description: The issue is related to memory corruption in the Audio component when processing VOC packet data from ADSP. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-24171 · Qualcomm · Snapdragon +54

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue involves memory corruption in the Audio component when an SSR event is triggered after music playback has been stopped. Recommendations: At the moment, there is no...

PT-2023-18317 · Audio · Audio

Name of the Vulnerable Software and Affected Versions: Audio affected versions not specified Description: The issue is related to memory corruption in the Audio component during a playback session when audio effects are enabled. Recommendations: At the moment, there is no information about a newe...

PT-2023-18318 · Qualcomm · Snapdragon +30

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in the audio component when validating and mapping metadata. There is no information about the estimated number of...