GOM Player 2.3.90.5360 - Buffer Overflow (PoC)

Exploit Title: GOM Player 2.3.90.5360 - Buffer Overflow PoC Discovered by: Ahmet Ümit BAYRAM Discovered Date: 30.08.2023 Vendor Homepage: https://www.gomlab.com Software Link: https://cdn.gomlab.com/gretech/player/GOMPLAYERGLOBALSETUPNEW.EXE Tested Version: 2.3.90.5360 latest Tested on: Windows 1...

Citrix Audio Diagnostic Tool

Citrix Audio Diagnostics tool 1.0.3 What’s new for this release? Support new policy Loss Tolerant Mode for Audio. Optimize the display of network metrics for high round-trip times ICA RTT. Support command-line mode and a runtime option in seconds, allowing the tool to operate in the background fo...

Oracle Linux 7 : libsndfile (ELSA-2020-1185)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1185 advisory. 1.0.25-11 - fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility 1598577 Tenable has extracted the preceding description block...

Oracle Linux 7 : taglib (ELSA-2020-1175)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1175 advisory. 1.8-8.20130218git - Fixed OOB read when loading invalid ogg flac file Resolves: bz1585260 Tenable has extracted the preceding description block directly from th...

CVE-2023-21654

Memory corruption in Audio during playback session with audio effects enabled...

CVE-2022-40534

Memory corruption due to improper validation of array index in Audio...

Memory corruption

Memory corruption in Audio during playback session with audio effects enabled...

Memory corruption

Memory corruption in Audio while validating and mapping metadata...

Memory corruption

Memory corruption due to improper validation of array index in Audio...

CVE-2023-21655 Integer Overflow or Wraparound in Display

Memory corruption in Audio while validating and mapping metadata...

CVE-2023-21655

CVE-2023-21655 describes memory corruption in the Audio path during metadata validation/mapping. Public sources (NVD, Red Hat, CNNVD) confirm memory corruption in Audio; CVSS v3.1 base scores are high (7.8) per NVD, with local access required and high impact. Pixel/Qualcomm references indicate Qu...

CVE-2023-21655 Integer Overflow or Wraparound in Display

Memory corruption in Audio while validating and mapping metadata...

CVE-2023-21654 Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio

Memory corruption in Audio during playback session with audio effects enabled...

CVE-2023-21654

CVE-2023-21654 involves memory corruption in the Audio component during playback with audio effects enabled. Connected sources identify affected domain as Qualcomm Audio subsystems; Red Hat Android bulletin and CVE records reiterate the issue as memory corruption in Audio during playback. The cor...

CVE-2022-40534 Improper Validation of Array Index in Audio

Memory corruption due to improper validation of array index in Audio...

CVE-2022-40534 Improper Validation of Array Index in Audio

Memory corruption due to improper validation of array index in Audio...

CVE-2022-40534

CVE-2022-40534 is described as memory corruption due to improper validation of an array index in Audio. Connected sources indicate this affects Qualcomm closed-source components with high impact (CNA score 8.4; local attack vector, low complexity; no privileges required; no user interaction). Pub...

[SECURITY] Fedora 37 Update: oggvideotools-0.9.1-13.fc37

A toolbox for manipulating Ogg video files, which usually consist of a video stream Theora and an audio stream Vorbis. It includes a number of handy command line tools for manipulating these video files, such as for splitting the different streams...

Huawei HarmonyOS Security Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from a privilege control vulnerability in the audio module. Successful exploitation of this...

WordPress Meks Audio Player Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Meks Audio Player Type Plugin Vulnerable versions = 1.2 Fixed in 1.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-25989 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 885bf7c11f1b Credits Muhammad Daffa Requir...