14705 matches found
PT-2024-12421 · Adsp · Adsp
Name of the Vulnerable Software and Affected Versions: ADSP affected versions not specified Description: The issue is related to memory corruption in the Audio component of ADSP when a memory map command is executed consecutively. Recommendations: At the moment, there is no information about a...
ASB-A-294104969
In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check for active recordings. This could lead to local denial of service with no additional execution privileges needed. User interaction is need...
Zero-Click Outlook RCE Exploitation Chain in Windows
Summary: Two vulnerabilities CVE-2023-35384 and CVE-2023-36710 in Microsoft Windows can be chained to achieve remote code execution RCE on vulnerable Outlook clients. Attackers can exploit these flaws by sending a crafted email with a custom notification sound file to trigger the download of a...
SUSE CVE-2023-51580
BlueZ Audio Profile AVRCP avrcpparseattributelist Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this...
(0Day) BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device. The specific flaw exists within the handling o...
CVE-2023-40475
A heap buffer overflow flaw was found in the MXF file, demuxer, in the GStreamer Plugins Bad when handling malformed files with AES3 audio. This issue requires user interaction with the library. It may allow a malicious user to cause an integer overflow before allocating the buffer, triggering a...
Fedora: Security Advisory (FEDORA-2023-5130a73b00)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 39 Update: uxplay-1.66-2.fc39
An AirPlay2 Mirror and AirPlay2 Audio but not Video server that provides screen-mirroring with audio of iOS/MacOS clients in a display window on the server host which can be shared using a screen-sharing application; Apple Lossless Audio ALAC e.g.,iTunes can be streamed from client to server in...
[SECURITY] Fedora 38 Update: uxplay-1.66-2.fc38
An AirPlay2 Mirror and AirPlay2 Audio but not Video server that provides screen-mirroring with audio of iOS/MacOS clients in a display window on the server host which can be shared using a screen-sharing application; Apple Lossless Audio ALAC e.g.,iTunes can be streamed from client to server in...
PT-2023-31054 · Jellyfin · Jellyfin
Name of the Vulnerable Software and Affected Versions: Jellyfin versions prior to 10.8.13 Description: The issue concerns an argument injection in the VideosController, specifically the "/Videos//stream" and "/Videos//stream." endpoints, which are reachable by an unauthenticated user. Additional...
The vulnerability of the Audio microprogramming software service on Intel NUC P14E Laptop Element allows attackers to enhance their privileges.
The vulnerability of the Audio microprogramming software service in Intel NUC P14E Laptop Element laptops is related to the incorrect use of standard resolutions. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2023-33079
Memory corruption in Audio while running invalid audio recording from ADSP...
CVE-2023-22668
Memory Corruption in Audio while invoking IOCTLs calls from the user-space...
CVE-2023-22668
Memory Corruption in Audio while invoking IOCTLs calls from the user-space...
Memory corruption
Memory corruption in Audio while running invalid audio recording from ADSP...
Memory corruption
Memory Corruption in Audio while invoking IOCTLs calls from the user-space...
CVE-2023-33079
CVE-2023-33079 : Memory corruption in the Audio path when processing an invalid audio recording in the ADSP on Qualcomm components (e.g., Snapdragon). Affected in Qualcomm audio/closed-source components per CVE mapping; CVSSv3.1 base score 7.8 (High) with local attack, low complexity, low privile...
CVE-2023-33079 Use of Out-of-range Pointer Offset in Audio
Memory corruption in Audio while running invalid audio recording from ADSP...
CVE-2023-22668
CVE-2023-22668 describes a memory corruption issue in the audio subsystem when user-space IOCTLs are invoked on Qualcomm chipsets. Affected component: audio path in Qualcomm devices; root cause: memory corruption leading to potential impact on confidentiality, integrity, and availability (per CVS...
