PT-2026-28260

River Past Audio Converter 7.7.16 contains a local buffer overflow vulnerability in the activation code field that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a large payload of repeated characters into the 'E-Mail and Activation Cod...

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Use-after-free in the JavaScript Engine component CVE-2026-4701 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR...

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Use-after-free in the JavaScript Engine component CVE-2026-4701 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR...

Google Chrome heap buffer overflow vulnerability (CNVD-2026-15406)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a heap buffer overflow vulnerability that is caused by improper boundary checking in WebAudio. An attacker can exploit this vulnerability to execute arbitrary code on the system or cause an application to...

ALSA-2026:5930 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Use-after-free in the JavaScript Engine component CVE-2026-4701 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR...

CVE-2019-25649: Out-of-bounds Write

River Past Audio Converter 7.7.16 contains a local buffer overflow vulnerability in the activation code field that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a large payload of repeated characters into the 'E-Mail and Activation Cod...

ALSA-2026:5931 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Use-after-free in the JavaScript Engine component CVE-2026-4701 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR...

The vulnerability of the snd_dma_wc_alloc() function in the sound/core/memalloc.c module, which supports Linux’s kernel-based audio cards, allows a hacker to cause a service failure.

The vulnerability of the snddmawcalloc function in the sound/core/memalloc.c module, which is part of Linux’s kernel-based audio card support mechanism, is related to incorrect input data validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

FreeBSD : Mozilla -- Multiple vulnerabilities (32819a60-2943-11f1-8461-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 32819a60-2943-11f1-8461-b42e991fc52e advisory. CVE-2026-4721: Memory safety bugs. Potential arbitrary code execution. CVE-2026-4709: Incorrec...

The vulnerability of the functions va_macro_dec_mode_get() and va_macro_dec_mode_put() in the sound/soc/codecs/lpass-va-macro.c module, which is part of the Linux operating system’s SoC audio support mechanism. This vulnerability allows an attacker to gain access to protected information or cause a service failure.

The vulnerability of the functions vamacrodecmodeget and vamacrodecmodeput in the sound/soc/codecs/lpass-va-macro.c module related to the Linux SoC audio support involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or...

The vulnerability of the `tx_macro_put_dec_enum()` function in the `sound/soc/codecs/lpass-tx-macro.c` module exposes the confidentiality, integrity, and accessibility of protected information within the Linux SoC kernel’s audio support mechanism. This vulnerability can be exploited by attackers to compromise these security aspects.

The vulnerability of the txmacroputdecenum function in the sound/soc/codecs/lpass-tx-macro.c module related to the Linux operating system’s SoC audio support is associated with out-of-buffer writing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

The vulnerability of the __graph_for_each_link() function in the sound/soc/generic/audio-graph-card.c module allows a hacker to trigger a service failure in the Linux operating system’s SoC audio kernel.

The vulnerability of the graphforeachlink function in the sound/soc/generic/audio-graph-card.c module related to Linux’s audio SoC kernel is associated with errors during link counter updates. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the snd_ac97_dev_register() function in the sound/pci/ac97/ac97_codec.c module of the Linux kernel’s audio subsystem allows a hacker to cause a system failure.

The vulnerability of the sndac97devregister function in the sound/pci/ac97/ac97codec.c module of the Linux kernel’s audio subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the i2sbus_add_dev() function in the sound/aoa/soundbus/i2sbus/core.c module of the Linux kernel’s audio subsystem allows a hacker to cause a service failure.

The vulnerability of the i2sbusadddev function in the sound/aoa/soundbus/i2sbus/core.c module of the Linux kernel’s audio subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

ALSA-2026:5932 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Use-after-free in the JavaScript Engine component CVE-2026-4701 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR...

Information Exposure

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Information Exposure via the userRecoverPass.php endpoint. An attacker can obtain information about the existence and status of user accounts by sending crafted...

Incorrect Authorization

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Incorrect Authorization in the authorization for video management operations. An attacker can gain unauthorized access to modify or delete any video, alter content...

CVE-2026-23318

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio driver. A malicious USB Audio Class 3 UAC3 device could exploit an incorrect protocol version used for UAC3 header validation. This error causes the device's header descriptors to bypass validation, allowing a...

SUSE CVE-2026-23301

In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Add allocation failure check for Entity name Currently findsdcaentityiot can allocate a string for the Entity name but it doesn't check if that allocation succeeded. Add the missing NULL check after the allocation...

SUSE CVE-2026-23318

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Use correct version for UAC3 header validation The entry of the validators table for UAC3 AC header descriptor is defined with the wrong protocol version UACVERSION2, while it should have been UACVERSION3. This...