14913 matches found
OESA-2024-2216 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Stop parsing channels bits when all channels are found. If a usb audio device sets more bits than the amount of channels it could write outside ...
ASoC: Intel: soc-acpi-intel-lnl-match: add missing empty item
...
Deebot Robot Vacuums Are Using Photos and Audio to Train Their AI
An Australian news agency is reporting that robot vacuum cleaners from the Chinese company Deebot are surreptitiously taking photos and recording audio, and sending that data back to the vendor to train their AIs. Ecovacs's privacy policy--available elsewhere in the app--allows for blanket...
AZL-50307 CVE-2024-48957 affecting package libarchive for versions less than 3.7.7-1
executefilteraudio in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst...
AZL-50315 CVE-2024-48957 affecting package libarchive for versions less than 3.6.1-4
executefilteraudio in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst...
ALPINE-CVE-2024-48957
executefilteraudio in archivereadsupportformatrar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst...
libarchive 缓冲区错误漏洞
libarchive is a multi-format archive and compression library open-sourced by libarchive. A security vulnerability exists in versions of libarchive prior to 3.7.5, which stems from executefilteraudio in archivereadsupportformatrar.c that allows out-of-bounds access via a carefully crafted archive...
CentOS 6 : chromium-browser (RHSA-2020:1270)
The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:1270 advisory. - usrsctp before 2019-12-20 has out-of-bounds reads in sctploadaddressesfrominit. CVE-2019-20503 - Use after free in WebGL in Google Chrome prior to...
CVE-2024-23378
Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record...
CVE-2024-23378 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record...
CVE-2024-23378
CVE-2024-23378 affects the MSM module in Qualcomm chipsets. The vulnerability is described as memory corruption occurring when invoking IOCTL calls from user space during audio playback and recording, caused by improper handling of IOCTLs. The provided documents do not specify concrete affected v...
CVE-2024-23378 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
Memory corruption while invoking IOCTL calls for MSM module from the user space during audio playback and record...
PT-2024-19853
Name of the Vulnerable Software and Affected Versions MSM module affected versions not specified Description The issue involves memory corruption when invoking IOCTL calls for the MSM module from user space during audio playback and record. This occurs due to improper handling of IOCTL calls,...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from buffer copying without checking the size of the audio input...
Apple Releases Critical iOS and iPadOS Updates to Fix VoiceOver Password Vulnerability
Apple has released iOS and iPadOS updates to address two security issues, one of which could have allowed a user's passwords to be read out aloud by its VoiceOver assistive technology. The vulnerability, tracked as CVE-2024-44204, has been described as a logic problem in the new Passwords app...
CVE-2024-6442
In ascscprspadd in /subsys/bluetooth/audio/ascs.c, an unchecked tailroom could lead to a global buffer overflow...
UBUNTU-CVE-2024-6442
In ascscprspadd in /subsys/bluetooth/audio/ascs.c, an unchecked tailroom could lead to a global buffer overflow...
CVE-2024-6442
CVE-2024-6442 affects Zephyr project Bluetooth Audio Subsystem: the function ascs_cp_rsp_add in /subsys/bluetooth/audio/ascs.c has an unchecked tailroom that can cause a global buffer overflow. This is the explicit root cause and impact described across multiple sources. The provided documents do...