Lucene search
+L

328 matches found

The Hacker News
The Hacker News
•added 2025/01/10 3:39 p.m.•26 views

Google Project Zero Researcher Uncovers Zero-Click Exploit Targeting Samsung Devices

Cybersecurity researchers have detailed a now-patched security flaw impacting Monkey's Audio APE decoder on Samsung smartphones that could lead to code execution. The high-severity vulnerability, tracked as CVE-2024-49415 CVSS score: 8.1, affects Samsung devices running Android versions 12, 13, a...

8.1CVSS7.8AI score0.0095EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/02/05 12:00 a.m.•18 views

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips that stems from a race condition in the mp3 decoder module that may result in out-of-bounds writes...

7.5CVSS6.8AI score0.00252EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/02/04 12:00 a.m.•14 views

PT-2024-18495 · Unknown · Mp3 Decoder

Name of the Vulnerable Software and Affected Versions: mp3 decoder affected versions not specified Description: The issue is related to a possible out of bounds write due to a race condition in the mp3 decoder. This could lead to remote escalation of privilege with no additional execution...

7.5CVSS7.6AI score0.00252EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2022/09/19 12:00 a.m.•25 views

The vulnerability of the sbr_process_channel function in the libfaad/sbr_dec.c component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a intruder to trigger a service failure.

The vulnerability of the sbrprocesschannel function in the libfaad/sbrdec.c component of the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to improper processing of new PS channels. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.1CVSS7AI score0.01128EPSS
SaveExploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/09/14 12:00 a.m.•17 views

The vulnerability of the ifilter_bank function in the libfaad/filtbank.c component allows a hacker to trigger a service failure. This vulnerability is present in the Freeware Advanced Audio Decoder 2 (FAAD2) audio decoder.

The vulnerability of the ifilterbank function in the libfaad/filtbank.c component is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

7.1CVSS6.8AI score0.01128EPSS
SaveExploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•16 views

The vulnerability of the stszin function in the mp4read.c component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the stszin function in the mp4read.c component of the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

9.3CVSS7.7AI score0.01252EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•16 views

The vulnerability of the sbr_qmf_synthesis_64 function in the sbr_qmf.c component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the sbrqmfsynthesis64 function in the sbrqmf.c component of the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to buffer-overflow situations. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and...

9.3CVSS7.5AI score0.01289EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/01 12:00 a.m.•17 views

The vulnerability of the ftypin function in the mp4read.c component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the ftypin function in the mp4read.c component of the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

8.8CVSS7.7AI score0.0115EPSS
SaveExploits1References5Affected Software2
Debian
Debian
•added 2022/03/27 8:28 p.m.•208 views

[SECURITY] [DSA 5109-1] faad2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5109-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 27, 2022 https://www.debian.org/security/faq -...

7.8CVSS7.2AI score0.01294EPSS
SaveExploits10
BDU FSTEC
BDU FSTEC
•added 2021/10/20 12:00 a.m.•25 views

The vulnerability of the Media Audio Decoder decoder in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Media Audio Decoder driver for the Windows operating system is related to errors in code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7CVSS7.6AI score0.02027EPSS
SaveExploits0References3
NVD
NVD
•added 2021/10/13 1:15 a.m.•29 views

CVE-2021-41331

Windows Media Audio Decoder Remote Code Execution Vulnerability...

7.8CVSS0.02027EPSS
SaveExploits0References1
Prion
Prion
•added 2021/10/13 1:15 a.m.•30 views

Remote code execution

Windows Media Audio Decoder Remote Code Execution Vulnerability...

6.8CVSS8AI score0.02027EPSS
SaveExploits0References1Affected Software5
OpenVAS
OpenVAS
•added 2021/10/13 12:00 a.m.•121 views

Microsoft Windows Multiple Vulnerabilities (KB5006743)

This host is missing a critical security update according to Microsoft KB5006743 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.4AI score0.74129EPSS
SaveExploits11References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/13 12:00 a.m.•2 views

CVE-2021-41331: Undefined Security Weakness

Windows Media Audio Decoder Remote Code Execution Vulnerability...

7.8CVSS5.8AI score0.02027EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2021/10/12 7:00 a.m.•35 views

Windows Media Audio Decoder Remote Code Execution Vulnerability

...

7.8CVSS7.6AI score0.02027EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/10/12 12:00 a.m.•11 views

PT-2021-4440 · Microsoft · Windows Media Audio Decoder +1

Name of the Vulnerable Software and Affected Versions: Windows Media Audio Decoder affected versions not specified Description: The issue is related to errors in code generation management in the Windows Media Audio Decoder. It allows remote attackers to execute arbitrary code and affect the...

7.8CVSS7.5AI score0.02027EPSS
SaveExploits0References9
Kaspersky
Kaspersky
•added 2021/10/12 12:00 a.m.•62 views

KLA12309 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, obtain sensitive information, gain privileges, execute arbitrary code, cause denial of service. Below is a...

8.8CVSS9.6AI score0.74129EPSS
SaveExploits11References44
CNVD
CNVD
•added 2021/09/23 12:00 a.m.•73 views

FAAD2 Heap Buffer Overflow Vulnerability (CNVD-2021-89951)

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. a heap buffer overflow vulnerability exists in the stszin function in mp4read.c in FAAD2 version 2.10.0 and earlier. An attacker could exploit this vulnerability to execute co...

7.8CVSS7.9AI score0.01252EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/09/20 12:00 a.m.•28 views

Faad2 缓冲区错误漏洞

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. a heap buffer overflow vulnerability exists in the stszin function in mp4read.c in FAAD2 version 2.10.0 and earlier. An attacker could exploit this vulnerability to execute co...

7.8CVSS7.9AI score0.01252EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2021/09/20 12:00 a.m.•18 views

Faad2 缓冲区错误漏洞

Freeware Advanced Audio Decoder 2 FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder licensed under the GPLv2 license. ltprediction function in ltpredict.c in FAAD2 2.10.0 and earlier versions is vulnerable to a heap buffer overflow vulnerability. An attacker could exploit this vulnerability t...

7.8CVSS7.8AI score0.01259EPSS
SaveExploits1References10
Rows per page
Query Builder