freerdp: FreeRDP: Denial of Service via use-after-free in AUDIN format renegotiation

A use after free flaw was found in FreeRDP. AUDIN format renegotiation frees the active format list while the capture thread continues using audin-format, leading to a use after free in audioformatcompatible. A malicious server can trigger a client‑side heap use after free causing a crash...

freerdp: FreeRDP heap-buffer-overflow

A heap based buffer overflow has been discovered in FreeRDP. Prior to 3.20.1, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input AUDIN format lists. audinprocessformats reuses callback-formatscount across multiple MSGSNDINFORMATS PDUs...

SUSE-SU-2026:1163-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 140.9 MFSA 2026-24, bsc1260083: - CVE-2026-3889: Spoofing issue in Thunderbird - CVE-2026-4371: Out of bounds read in IMAP parsing - CVE-2026-4684: Race condition, use-after-free in the Graphics: WebRende...

[SECURITY] Fedora 43 Update: gst-editing-services-1.26.11-1.fc43

This is a high-level library for facilitating the creation of audio/video non-linear editors...

The vulnerability of the mt8192_mt6359_dev_probe() function in the sound module/soc/mediatek/mt8192/mt8192-mt6359-rt1015-rt5682.c file, which supports Linux operating system cores for audio support on SoCs. This vulnerability allows a hacker to cause a service failure.

The vulnerability of the mt8192mt6359devprobe function in the sound module/soc/mediatek/mt8192/mt8192-mt6359-rt1015-rt5682.c file related to Linux system kernel audio support is associated with errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the sma1307 Setting_Loaded() function in the sound/soc/codecs/sma1307.c module of the Linux operating system’s SoC audio support module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sma1307settingloaded function in the sound/soc/codecs/sma1307.c module, which is part of the Linux operating system’s audio support for SoC cores, relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious...

The vulnerability of the fcp_avcTransaction() function in the sound/firewire/fcp.c module of the Linux kernel’s audio subsystem allows a hacker to cause a service failure.

The vulnerability of the fcpavcTransaction function in the sound/firewire/fcp.c module of the Linux kernel’s audio subsystem is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the snd_ymfpci_memalloc() function in the sound/pci/ymfpci/ymfpci_main.c module of the Linux kernel’s audio subsystem allows a hacker to cause a service failure.

The vulnerability of the sndymfpcimemalloc function in the sound/pci/ymfpci/ymfpcimain.c module of the Linux kernel’s audio subsystem is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

The vulnerability of the zynqmp_audio_init() function in the drivers/gpu/drm/xlnx/zynqmp_dp_audio.c driver module allows a hacker to cause a service failure in the Linux operating system’s Direct Rendering Infrastructure (DRI).

The vulnerability of the zynqmpaudioinit function in the drivers/gpu/drm/xlnx/zynqmpdpaudio.c driver lies in the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

About the security content of iOS 18.7.7 and iPadOS 18.7.7

About the security content of iOS 18.7.7 and iPadOS 18.7.7 About the security content of iOS 18.7.7 and iPadOS 18.7.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

ALSA-2026:6342 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Use-after-free in the JavaScript Engine component CVE-2026-4701 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and...

Medium: freerdp

Issue Overview: FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.24.0, a client-side heap buffer overflow occurs in the FreeRDP client's AVC420/AVC444 YUV-to-RGB conversion path due to missing horizontal bounds validation of H.264 metablock regionRects coordinates. In...

SUSE CVE-2026-33977

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, a malicious RDP server can crash the FreeRDP client by sending audio data in IMA ADPCM format with an invalid initial step index value = 89. The unvalidated step index is read directly from the network and...

gstreamer-plugins-base: GStreamer: Arbitrary code execution via RIFF palette integer overflow in AVI file handling

A flaw was found in GStreamer. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. The flaw exists within the handling of palette data in AVI files, where a lack of proper validation of user-supplied data can lead to an integer overflow...

CVE-2026-28526

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller LISTPLAYERAPPLICATIONSETTINGATTRIBUTES and LISTPLAYERAPPLICATIONSETTINGVALUES handlers that allows attackers to read beyond buffer boundaries. A nearby attacker with a paired Bluetooth...

CVE-2026-28527

BlueKitchen BTstack versions prior to 1.8.1 contain an out-of-bounds read vulnerability in the AVRCP Controller GETPLAYERAPPLICATIONSETTINGATTRIBUTETEXT and GETPLAYERAPPLICATIONSETTINGVALUETEXT handlers that allows nearby attackers to read beyond packet boundaries. Attackers can establish a paire...

Security update for freerdp

This update for freerdp fixes the following issues: CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing bsc1258979. CVE-2026-26955: Out-of-bounds Write in freerdp bsc1258982. CVE-2026-26965: Out-of-bounds Write in freerdp bsc1258985. CVE-2026-31806: improper validation of server messages c...

SUSE-SU-2026:1160-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing bsc1258979. - CVE-2026-26955: Out-of-bounds Write in freerdp bsc1258982. - CVE-2026-26965: Out-of-bounds Write in freerdp bsc1258985. - CVE-2026-31806: improper validation of server...

Mozilla Firefox and Mozilla Thunderbird Security Bypass Vulnerability (CNVD-2026-16378)

Mozilla Firefox is an open source web browser.Mozilla Thunderbird is a set of e-mail client software separate from the Mozilla Application Suite. The software supports IMAP, POP mail protocols and HTML mail format. A security bypass vulnerability exists in Mozilla Firefox and Mozilla Thunderbird...

Multiple Mozilla Products Code Issues Vulnerabilities

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A code issue vulnerability exists in multiple Mozilla products that stem...