18514 matches found
CVE-2025-22420
In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22420
In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22420
In multiple locations, there is a possible way to leak audio files across user profiles due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22420
A security vulnerability exists in the Android Framework component that allows for the leakage of audio files across different user profiles. The root cause is attributed to a confused deputy issue, where the system fails to properly restrict data access. Successful exploitation can lead to local...
ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
...
CVE-2025-66326
Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-66326
Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-66326
CVE-2025-66326 is described as a race condition in the Huawei HarmonyOS audio module, with availability impact. Connected sources consistently reference a local-exploit scenario and high impact on availability, but do not provide concrete version, patch, or remediation details. Exploitation statu...
CVE-2025-66326
Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2025-201690
Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-66326
Race condition vulnerability in the audio module. Impact: Successful exploitation of this vulnerability may affect availability...
firefox: thunderbird: Use-after-free in the Audio/Video component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...
firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Audio/Video component...
firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Audio/Video component...
firefox: thunderbird: Use-after-free in the Audio/Video component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...
UBUNTU-CVE-2025-40317
In the Linux kernel, the following vulnerability has been resolved: regmap: slimbus: fix buscontext pointer in regmap init calls Commit 4e65bda8273c "ASoC: wcd934x: fix error handling in wcd934xcodecparsedata" revealed the problem in the slimbus regmap. That commit breaks audio playback, for...
SUSE CVE-2025-40269
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential overflow of PCM transfer buffer The PCM stream data in USB-audio driver is transferred over USB URB packet buffers, and each packet size is determined dynamically. The packet sizes are limited by so...
SUSE CVE-2025-40275
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer dereference in sndusbmixercontrolsbadd In sndusbcreatestreams, for UAC version 3 devices, the Interface Association Descriptor IAD is retrieved via usbifnumtoif. If this call fails, a fallback...
sound/core/sound_kunit.c Heap Buffer Overflow DoS
The vulnerability of the testformatfillsilence function in the sound/core/soundkunit.c module, which is part of Linux’s kernel-based audio card support, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...
sndctl LedSysfs_Add() DoS
The vulnerability of the sndctl LedSysfsAdd function in the sound/core/controlLed.c module, which supports Linux kernel-based audio cards, is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...