CVE-2023-35657

CVE-2023-35657 affects the Bluetooth stack component bta_av_config_ind in bta_av_aact.cc, where a type confusion can cause an out-of-bounds read leading to local information disclosure without extra privileges or user interaction. Public references indicate this vulnerability is tracked in Androi...

Linux Distros Unpatched Vulnerability : CVE-2020-22678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in gpac 0.8.0. The gfmedianaluremoveemulationbytes function in avparsers.c has a heap-based buffer overflow which can lead to a denial o...

Linux Distros Unpatched Vulnerability : CVE-2021-40570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avccomputepoc function in avparsers.c, which allows attackers to cause a denial of servic...

Linux Distros Unpatched Vulnerability : CVE-2022-47087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC MP4box 2.1-DEV-rev574-g9d5bb184b has a Buffer overflow in gfvvcreadppsbsinternal function of mediatools/avparsers.c CVE-2022-47087 Note that Nessus relies ...

Linux Distros Unpatched Vulnerability : CVE-2023-51796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/freverse.c:269:26 in...

Linux Distros Unpatched Vulnerability : CVE-2023-46929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue discovered in GPAC 2.3-DEV-rev605-gfc9e29089-master in MP4Box in gfavcchangevui /afltest/gpac/src/mediatools/avparsers.c:6872:55 allows attackers to...

Linux Distros Unpatched Vulnerability : CVE-2021-40565

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Segmentation fault caused by a null pointer dereference vulnerability exists in Gpac through 1.0.1 via the gfavcparsenalu function in avparsers.c when using...

Linux Distros Unpatched Vulnerability : CVE-2021-30022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a integer overflow in mediatools/avparsers.c in the gfavcreadppsbsinternal in GPAC from 0.5.2 to 1.0.1. ppsid may be a negative number, so it will not...

MAL-2025-27352 Malicious code in new-al-bum-av-ailable-curse-your-branches-9opbb-omehez (npm)

The package new-al-bum-av-ailable-curse-your-branches-9opbb-omehez was found to contain malicious code...

Malicious code in new-al-bum-av-ailable-2017-84902-three-futures-eheyb-czhdsw (npm)

The package new-al-bum-av-ailable-2017-84902-three-futures-eheyb-czhdsw was found to contain malicious code...

Malicious code in new-al-bum-av-ailable-progress-5zjb6-rbopge (npm)

The package new-al-bum-av-ailable-progress-5zjb6-rbopge was found to contain malicious code...

Malicious code in new-al-bum-av-ailable-24973-black-dialogue-hdrb2-ckuphe (npm)

The package new-al-bum-av-ailable-24973-black-dialogue-hdrb2-ckuphe was found to contain malicious code...

Malicious code in new-al-bum-av-ailable-campfire-songs-1-k7le9-wpxeon (npm)

The package new-al-bum-av-ailable-campfire-songs-1-k7le9-wpxeon was found to contain malicious code...

Malicious code in new-al-bum-av-ailable-greetings-from-michigan-the-great-lakes-state-7x9l5-guwkve (npm)

The package new-al-bum-av-ailable-greetings-from-michigan-the-great-lakes-state-7x9l5-guwkve was found to contain malicious code...

MAL-2025-27346 Malicious code in new-al-bum-av-ailable-23296-triumph-eb5kv-wzigao (npm)

The package new-al-bum-av-ailable-23296-triumph-eb5kv-wzigao was found to contain malicious code...

MAL-2025-27344 Malicious code in new-al-bum-av-ailable-17746-here-my-dear-8zdhb-bwjsfw (npm)

The package new-al-bum-av-ailable-17746-here-my-dear-8zdhb-bwjsfw was found to contain malicious code...

MAL-2025-27349 Malicious code in new-al-bum-av-ailable-532141-nothing-special-3hobm-scpavd (npm)

The package new-al-bum-av-ailable-532141-nothing-special-3hobm-scpavd was found to contain malicious code...

MAL-2025-27355 Malicious code in new-al-bum-av-ailable-progress-5zjb6-rbopge (npm)

The package new-al-bum-av-ailable-progress-5zjb6-rbopge was found to contain malicious code...

MAL-2025-27350 Malicious code in new-al-bum-av-ailable-american-doll-posse-hawjk-crclgb (npm)

The package new-al-bum-av-ailable-american-doll-posse-hawjk-crclgb was found to contain malicious code...

Driver of destruction: How a legitimate driver is being used to take down AV processes

Introduction In a recent incident response case in Brazil, we spotted intriguing new antivirus AV killer software that has been circulating in the wild since at least October 2024. This malicious artifact abuses the ThrottleStop.sys driver, delivered together with the malware, to terminate numero...