Lucene search
+L

14846 matches found

CNVD
CNVD
added 2021/12/28 12:00 a.m.18 views

Adobe Media Encoder Memory Corruption Vulnerability (CNVD-2022-52098)

Adobe Media Encoder, an audio and video encoding application from Adobe, is vulnerable to a memory corruption vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

9.3CVSS6.8AI score0.01969EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:00 a.m.11 views

The vulnerability of Adobe Premiere Rush software, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe Premiere Rush relates to the execution of operations beyond the buffer in memory when processing M4A files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.02273EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:00 a.m.14 views

The vulnerability of Adobe Premiere Rush software, related to the execution of operations beyond buffer boundaries in memory, allows attackers to execute arbitrary code.

The vulnerability of Adobe Premiere Rush relates to the execution of operations beyond the buffer in memory when processing M4A files. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.02273EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2021/12/27 12:00 a.m.14 views

Rust libpulse-binding crate资源管理错误漏洞

Rust libpulse-binding crate is a repository containing sys FFI and binding libraries crates for connecting to PulseAudio PA from the Rust programming language.Mozilla Rust libpulse-binding crate memory corruption vulnerability, which stems from a security flaw in A security vulnerability exists i...

7.5CVSS5.7AI score0.01091EPSS
SaveExploits0References3
Fedora
Fedora
added 2021/12/25 1:06 a.m.21 views

[SECURITY] Fedora 35 Update: libopenmpt-0.5.15-1.fc35

libopenmpt is a cross-platform C++ and C library to decode tracked music files modules into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project Open ModPlug Tracker. In order to avoid code base fragmentation, libopenmpt is developed in the same source code...

2AI score
SaveExploits0
Pen Test Partners Blog
Pen Test Partners Blog
added 2021/12/22 5:55 p.m.26 views

Audio bugging with the Fisher Price Chatter Bluetooth Telephone

The Fisher Price Chatter Bluetooth Telephone is a reincarnation of a familiar kids toy. It acts as a Bluetooth headset, so the user can connect their smartphone to it and take calls using the kids phone handset. Cute! Unfortunately, little to no consideration has been given to privacy and securit...

6.7AI score
SaveExploits0
OSV
OSV
added 2021/12/20 9:15 p.m.7 views

CVE-2021-43029

Adobe Premiere Rush version 1.5.16 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious M4A file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability...

7.8CVSS6.5AI score0.02273EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2021/12/20 7:22 p.m.42 views

CVE-2021-30836

An out-of-bounds read flaw was found in WebKitGTK. A specially crafted audio file could use this flaw to trigger a disclosure of memory when processed...

5.5CVSS1.9AI score0.01104EPSS
SaveExploits0References3
Citrix
Citrix
added 2021/12/20 12:00 a.m.17 views

CWAL2109 on some thinclient will crash when enabled Adaptive audio.

1, Enabled Adaptive audio via citrix poicy. 2, Connect to desktop VDA with thinclient CWAL. 3, The process wfica on the thinclient will crash due to illegal instruction.ew...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2021/12/20 12:00 a.m.9 views

Fedora: Security Advisory for dr_libs (FEDORA-2021-a943b03c3f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Talos
Talos
added 2021/12/20 12:00 a.m.55 views

Blackmagic Design DaVinci Resolve R3D DPDecoder Service frame parsing uninitialized uuid object vulnerability

Summary When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the...

9.8CVSS9.6AI score0.17945EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2021/12/20 12:00 a.m.9 views

Fedora: Security Advisory for dr_libs (FEDORA-2021-c2dc9abd76)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
NVD
NVD
added 2021/12/17 9:15 p.m.32 views

CVE-2021-41499

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

7.5CVSS0.01401EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2021/12/17 9:15 p.m.21 views

CVE-2021-41499

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

7.5CVSS7.1AI score0.01401EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2021/12/17 8:36 p.m.42 views

CVE-2021-41499

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

7.6AI score0.01401EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2021/12/17 8:36 p.m.70 views

CVE-2021-41499

Buffer Overflow Vulnerability exists in ajaxsoundstudio.com n Pyo 1.03 in the Serverdebug function, which allows remote attackers to conduct DoS attacks by deliberately passing on an overlong audio file name...

7.5CVSS7.4AI score0.01401EPSS
SaveExploits1
OSV
OSV
added 2021/12/17 5:15 p.m.10 views

CVE-2021-0673

In Audio Aurisys HAL, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05977326; Issue ID: ALPS05977326...

7.8CVSS5.9AI score0.00671EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/17 5:15 p.m.31 views

CVE-2021-0673

In Audio Aurisys HAL, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05977326; Issue ID: ALPS05977326...

7.8CVSS0.00671EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/17 5:15 p.m.25 views

Design/Logic Flaw

In Audio Aurisys HAL, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05977326; Issue ID: ALPS05977326...

4.6CVSS7.7AI score0.00671EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/12/17 4:10 p.m.75 views

CVE-2021-0673

CVE-2021-0673 : In Audio Aurisys HAL, a missing permission check allows local escalation of privilege with no user interaction. Descriptions across sources confirm a permission bypass affecting the Audio HAL layer, with a patch identified as ALPS05977326 (Issue ID ALPS05977326). The vulnerability...

7.8CVSS7.7AI score0.00671EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder