Denial of Service (DoS)

Overview @discordjs/opus is a native bindings to libopus. Affected versions of this package are vulnerable to Denial of Service DoS when trying to encode using an encoder with zero channels, or a non-initialized buffer. This leads to a hard crash. PoC // Zero channels: javascript const OpusEncode...

24-hr-music (1.0.3), 2pg-music (>=1.0.0, <=1.1.2) +126 more potentially affected by CVE-2022-25345 via @discordjs/opus (>=0.1.0, <=0.7.0)

@discordjs/opus NPM version =0.1.0, =1.0.0, =1.1.2, =1.0.0, =1.0.3, =1.0.1, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =4.0.0-dev.1637284165.37d3883 - @dishost/music 0.0.0 and more Source cves: CVE-2022-25345 Source advisory: SNYK:JS-DISCORDJSOPUS-2403100...

spitfireaudio.com Cross Site Scripting vulnerability OBB-2374719

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Incoming audio issue on Microsoft Teams optimization for CWA Chrome OS

Any user on optimized Microsoft Teams is not able to receive any incoming audio during audio or video calls. Video streaming is not impacted. Users who meet the below conditions are likely to see the issue are on Citrix Workspace app for Chrome OS AND have enabled Microsoft Teams optimization...

Incoming audio issue on Microsoft Teams optimization for CWA HTML5

Any user on optimized Microsoft Teams is not able to receive any incoming audio during audio or video calls. Video streaming is not impacted. Users who meet below conditions are likely to see the issue are on Citrix Workspace app for HTML5 AND have enabled Microsoft Teams optimization...

js-audio-converter.com Cross Site Scripting vulnerability OBB-2370527

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Huawei Emui Out-of-Bounds Access Vulnerability

Huawei Emui is an Android-based mobile operating system developed by Huawei, a Chinese company. An out-of-bounds access vulnerability exists in Huawei EMUI version 12.0.0, which stems from the system's lax input parameter validation in the audio component. An attacker can exploit the vulnerabilit...

CVE-2022-23429

An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash...

CVE-2022-23429

An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash...

CVE-2022-23429

An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash...

Input validation

An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash...

CVE-2022-23429

CVE-2022-23429 describes an improper boundary check in the Android audio HAL service prior to SMR Feb-2022 Release 1, allowing local attackers to read invalid memory and cause an application crash. In the provided connected records, the vulnerability is documented across multiple sources (NVD, Re...

CVE-2022-23429

An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash...

(Pwn2Own) Sonos One Speaker ALAC Frame Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ALAC audio codec. The issue results from the lack of proper validation of the leng...

CVE-2021-39997

There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may cause out-of-bounds access...

CVE-2021-39997

There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may cause out-of-bounds access...

CVE-2021-39997

There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may cause out-of-bounds access...

CVE-2021-39997

CVE-2021-39997 affects Huawei EMUI 12.0.0. The root cause is lax/input parameter verification in the audio component (audio assembly), leading to out-of-bounds access. Exploitation is described as enabling out-of-bounds access, with CVSS metrics indicating high to critical impact (network attack ...

PT-2022-11122 · Huawei · Emui

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a vulnerability of unstrict input parameter verification in the audio assembly. Successful exploitation of this vulnerability may cau...

Huawei Emui 缓冲区错误漏洞

Huawei Emui is an Android-based mobile operating system developed by Huawei, a Chinese company. An out-of-bounds access vulnerability exists in Huawei EMUI version 12.0.0, which stems from the system's lax input parameter validation in the audio component. An attacker can exploit the vulnerabilit...