CVE-2021-30959

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur CoreAudio suffers from a buffer error vulnerability that originates from parsing maliciously crafted audio files that could lead to the disclosure of user information. The following products and versions are...

Libav Heap Buffer Overflow Vulnerability (CNVD-2021-94921)

Libav is an open source audio and video processing tool that provides cross-platform tools and libraries for converting, manipulating, and streaming various multimedia formats and protocols. vc1decodebmbintfi in vc1block.c in Libav version 12.3 is vulnerable to a heap buffer overflow. An attacker...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur CoreAudio suffers from a buffer error vulnerability that originates from parsing maliciously crafted audio files that could lead to the disclosure of user information. The following products and versions are...

Apple tvOS和Apple macOS Big Sur 安全漏洞

Apple tvOS and Apple macOS Big Sur are both products of Apple Inc. Apple tvOS is a smart TV operating system. apple macOS Big Sur is the 17th major version of macOS, Apple's operating system for the MAC. macOS Big Sur is the 17th major version of macOS, Apple's operating system for the MAC. A...

Sony Audio USB Driver 代码问题漏洞

SONY Sony Audio USB Driver is a Sony USB driver from Sony Japan. A code issue vulnerability exists in Sony Audio USB Driver. The vulnerability stems from the installer for multiple Sony products containing a DLL search path issue, which could lead to unsafe loading of dynamic link libraries...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur CoreAudio suffers from a buffer error vulnerability that originates from parsing maliciously crafted audio files that could lead to the disclosure of user information. The following products and versions are...

Libav Heap Buffer Overflow Vulnerability (CNVD-2021-94923)

Libav is an open source audio and video processing tool that provides cross-platform tools and libraries for converting, manipulating, and streaming various multimedia formats and protocols. vc1decodepmbintfi in vc1block.c in Libav version 12.3 is vulnerable to a heap buffer overflow. An attacker...

Apple iOS 和 iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.The vulnerability is caused by a buffer error in Apple iOS and iPadOS CoreAudio. A buffer error vulnerability exists in Apple iOS...

Apple iOS 和 iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS and iPadOS Audio, which arises from parsing maliciously crafted audio fil...

OPENSUSE-SU-2021:1180-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 92.0.4515.159 boo1189490: CVE-2021-30598: Type Confusion in V8 CVE-2021-30599: Type Confusion in V8 CVE-2021-30600: Use after free in Printing CVE-2021-30601: Use after free in Extensions API CVE-2021-30602: Use after free in WebRTC...

FFmpeg 安全漏洞

FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg Ffmpeg team. Ffmpeg suffers from a security vulnerability that stems from adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, a necessary step...

CVE-2021-39282

Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files...

CVE-2021-39282

Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files...

UBUNTU-CVE-2021-39282

Live555 through 1.08 has a memory leak in AC3AudioStreamParser for AC3 files...

openSUSE 15 Security Update : libsndfile (openSUSE-SU-2021:2764-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2764-1 advisory. - A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service...

Millions of IoT devices, baby monitors open to audio, video snooping

By Deeba Ahmed The vulnerability would allow threat actors to compromise a targeted ThroughTek IoT device and watch the real-time video feed, listen to audio, and compromise credentials. This is a post from HackRead.com Read the original post: Millions of IoT devices, baby monitors open to audio,...

Mandiant Discloses Critical Vulnerability Affecting Millions of IoT Devices

Today, Mandiant disclosed a critical risk vulnerability in coordination with the Cybersecurity and Infrastructure Security Agency “CISA” that affects millions of IoT devices that use the ThroughTek “Kalay” network. This vulnerability, discovered by researchers on Mandiant’s Red Team in late 2020,...

Mitel Networks MiCollab Licensing Issue Vulnerability

An authorization issue vulnerability exists in Mitel Networks MiCollab, a mobile application from Mitel Networks Canada that provides voice, video, messaging, audio conferencing, and team collaboration for employees, and stems from the product's MiCollab Client Service component does not validate...

Facebook Adds End-to-End Encryption for Audio and Video Calls in Messenger

Facebook on Friday said it's extending end-to-end encryption E2EE for voice and video calls in Messenger, along with testing a new opt-in setting that will turn on end-to-end encryption for Instagram DMs. "The content of your messages and calls in an end-to-end encrypted conversation is protected...