scarlett2_meterctl_get() DoS

The vulnerability of the scarlett2meterctlget function in the sound/usb/mixerscarlett2.c module, which supports USB audio devices in Linux operating systems, is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause service failures...

LIVE555 Streaming Media Null Pointer Dereference Vulnerability

LIVE555 Streaming Media is a cross-platform C++ open source library , focusing on providing solutions for streaming media applications , supporting a variety of standard protocols such as RTP/RTCP, RTSP and SIP. LIVE555 Streaming Media has a null pointer dereference vulnerability that originates...

Fedora 42 : linux-firmware (2025-a45a370014)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a45a370014 advisory. Update to 20251125: Revert amdgpu: update GC 11.0.1 firmware QCA: Add Bluetooth firmware for WCN685x uart interface qcom: Add ADSP firmware for...

RHEL 8 : firefox (RHSA-2025:22367)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:22367 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

EUVD-2025-200284

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, when AVRCP is enabled on ESP32, receiving a malformed VENDOR DEPENDENT command from a peer device can cause the Bluetooth stack to access memory before validating the command...

CVE-2025-65404

A flaw was found in Live555. A buffer overflow in getSideInfo2 allows attackers to cause a denial of service via a specially crafted MP3 stream...

CVE-2025-65405

A flaw was found in Live555. A use-after-free issue in ADTSAudioFileSource::samplingFrequency allows attackers to cause a denial of service via a specially crafted ADTS/AAC file...

cosmopower (0.2.0), guardrail-ml (>=0.0.14, <=0.0.15) +7 more potentially affected by CVE-2025-12060 via keras (2.15.0rc1)

keras PYPI version 2.15.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cosmopower 0.2.0 - guardrail-ml =0.0.14, =0.5.10, =0.1.0, =2.14.0rc0, =2.14.0rc0, =2.14.0rc1 - tensorflow-text 2.13.0rc0 - tf-extensions 0.1.0...

ESP-IDF buffer error vulnerability

ESP-IDF is an Espressif open source development framework for Espressif SoCs supported on Windows, Linux and macOS. A buffer error vulnerability exists in ESP-IDF versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and prior versions, which stems from insufficient validation of the buffer length when AVR...

firefox: thunderbird: Use-after-free in the Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Audio/Video component...

firefox: thunderbird: Use-after-free in the Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Audio/Video component...

firefox: thunderbird: Use-after-free in the Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video component...

firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Audio/Video component...

EUVD-2025-200068

A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service DoS via supplying a crafted ADTS file...

EUVD-2025-200021

A use-after-free in the ADTSAudioFileSource::samplingFrequency function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service DoS via supplying a crafted ADTS/AAC file...

EUVD-2025-200020

A buffer overflow in the getSideInfo2 function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service DoS via a crafted MP3 stream...

CVE-2025-65408

A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service DoS via supplying a crafted ADTS file...

UBUNTU-CVE-2025-65408

A NULL pointer dereference in the ADTSAudioFileServerMediaSubsession::createNewRTPSink function of Live555 Streaming Media v2018.09.02 allows attackers to cause a Denial of Service DoS via supplying a crafted ADTS file...