Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome versions prior to 108.0.5359.71 suffer from a security vulnerability in the use of Audio after release, which can be exploited by an attacker to launch an attack via a specially crafted Chrome Extension exploiting heap...

USN-5749-1: libsamplerate vulnerability

Erik de Castro Lopo and Agostino Sarubbo discovered that libsamplerate did not properly perform bounds checking. If a user were tricked into processing a specially crafted audio file, an attacker could possibly use this issue to cause a crash...

USN-5749-1 libsamplerate vulnerability

Erik de Castro Lopo and Agostino Sarubbo discovered that libsamplerate did not properly perform bounds checking. If a user were tricked into processing a specially crafted audio file, an attacker could possibly use this issue to cause a crash...

Google Chrome < 108.0.5359.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 108.0.5359.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 202211stable-channel-update-for-desktop29 advisory. - Use after free in Accessibility in Google Chrome prior to 108.0.5359.71...

FreeRDP < 2.8.1 Multiple Vulnerabilities

FreeRDP is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-4179

Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: High...

CVE-2022-4179

CVE-2022-4179 is a Use‑After‑Free in the Audio component of Google Chrome prior to 108.0.5359.71, allowing an attacker to potentially exploit heap corruption via a crafted Chrome Extension. Affected software is Chrome 108 and earlier; the fix was released as Chrome 108.0.5359.71 (and Debian/ALT/L...

CVE-2022-4179

Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: High...

CVE-2022-4179

Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: High...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 28 security fixes, including: 1379054 High CVE-2022-4174: Type Confusion in V8. Reported by Zhenghang Xiao @Kipreyyy on 2022-10-27 1381401 High CVE-2022-4175: Use after free in Camera Capture. Reported by Leecraso and Guang Gong of 360 Alpha Lab on...

Google Chrome < 108.0.5359.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 108.0.5359.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 202211stable-channel-update-for-desktop29 advisory. - Use after free in Accessibility in Google Chrome prior to 108.0.5359.71...

CVE-2022-44283

AVS Audio Converter 10.3 is vulnerable to Buffer Overflow...

CVE-2022-44283

AVS Audio Converter 10.3 is vulnerable to Buffer Overflow...

Buffer overflow

AVS Audio Converter 10.3 is vulnerable to Buffer Overflow...

CVE-2022-44283

AVS Audio Converter 10.3 is vulnerable to Buffer Overflow...

CVE-2022-44283

CVE-2022-44283 affects AVS Audio Converter 10.3 and is described as a buffer overflow. Public metrics indicate a critical impact (CVSS v3.1: 9.8, HIGH confidentiality/Integrity/Availability, NETWORK attack vector, no user interaction). The vulnerability targets a component/stream handling within ...

AVS4YOU AVS Audio Converter 安全漏洞

AVS4YOU AVS Audio Converter is a software application from AVS4YOU Inc. It is used to convert audio files from one format to another according to your wishes and save them to your hard drive. A security vulnerability exists in AVS4YOU AVS Audio Converter version 10.3 that stems from vulnerability...

CVE-2022-44283

AVS Audio Converter 10.3 is vulnerable to Buffer Overflow...

PT-2022-27166 · Unknown · Avs Audio Converter

Name of the Vulnerable Software and Affected Versions: AVS Audio Converter version 10.3 Description: The issue is related to a Buffer Overflow. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

PaddlePaddle vulnerable to code injection via winstr

In PaddlePaddle before 2.4, paddle.audio.functional.getwindow is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution...