PT-2025-2810 · Blackberry · Qnx Sdp

Name of the Vulnerable Software and Affected Versions: QNX SDP versions 7.0 through 8.0 Description: The issue is related to an out-of-bounds write in the PCX image codec. This could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the...

QNX Software Development Platform security vulnerabilities

The Blackberry QNX Software Development Platform is a suite of QNX software development platforms from Blackberry Canada. The platform is primarily used to develop software based on the QNX platform. A security vulnerability exists in QNX Software Development Platform SDP versions 8.0, 7.1, and...

QNX Software Development Platform code-related vulnerabilities

The Blackberry QNX Software Development Platform is a suite of QNX software development platforms from Blackberry Canada. The platform is primarily used to develop software based on the QNX platform. A code issue vulnerability exists in QNX Software Development Platform versions 8.0, 7.1, and 7.0...

PT-2025-2808 · Blackberry · Qnx Sdp

Name of the Vulnerable Software and Affected Versions: QNX SDP versions 7.0 through 8.0 Description: The issue is related to an off-by-one error in the TIFF image codec, which could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image...

QNX Software Development Platform Buffer Error Vulnerability

The Blackberry QNX Software Development Platform is a suite of QNX software development platforms from Blackberry Canada. The platform is primarily used to develop software based on the QNX platform. A buffer error vulnerability exists in QNX Software Development Platform versions 8.0, 7.1, and 7...

QNX Software Development Platform security vulnerabilities

The Blackberry QNX Software Development Platform is a suite of QNX software development platforms from Blackberry Canada. The platform is primarily used to develop software based on the QNX platform. A security vulnerability exists in QNX Software Development Platform SDP versions 8.0, 7.1, and...

QNX Software Development Platform Buffer Error Vulnerability

The Blackberry QNX Software Development Platform is a suite of QNX software development platforms from Blackberry Canada. The platform is primarily used to develop software based on the QNX platform. A buffer error vulnerability exists in QNX Software Development Platform SDP versions 8.0, 7.1, a...

CVE-2024-48855: Out-of-bounds Read

Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec...

PT-2025-2809 · Blackberry · Qnx Sdp

Name of the Vulnerable Software and Affected Versions: QNX SDP versions 7.0 through 8.0 Description: The issue is related to an out-of-bounds read in the TIFF image codec, which could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the imag...

OpenJPEG security vulnerabilities

OpenJPEG is a C-based open source JPEG2000 codec open-sourced by Université catholique de Louvain. A security vulnerability exists in OpenJPEG. An attacker exploiting this vulnerability could cause a heap buffer overflow...

SUSE CVE-2024-56685

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Check numcodecs is not zero to avoid panic during probe Following commit 13f58267cda3 "ASoC: soc.h: don't create dummy Component via COMPDUMMY", COMPDUMMY became an array with zero length, and only gets populated...

DEBIAN-CVE-2024-56685

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Check numcodecs is not zero to avoid panic during probe Following commit 13f58267cda3 "ASoC: soc.h: don't create dummy Component via COMPDUMMY", COMPDUMMY became an array with zero length, and only gets populated...

UBUNTU-CVE-2024-56685

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Check numcodecs is not zero to avoid panic during probe Following commit 13f58267cda3 "ASoC: soc.h: don't create dummy Component via COMPDUMMY", COMPDUMMY became an array with zero length, and only gets populated...

CVE-2024-56685 ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Check numcodecs is not zero to avoid panic during probe Following commit 13f58267cda3 "ASoC: soc.h: don't create dummy Component via COMPDUMMY", COMPDUMMY became an array with zero length, and only gets populated...

PT-2024-9987

Name of the Vulnerable Software and Affected Versions Apache MINA versions 2.0.X through 2.2.X Description The ObjectSerializationDecoder in Apache MINA lacks necessary security checks when processing incoming serialized data using Java’s native deserialization protocol. This allows attackers to...

ffmpeg:ffmpeg_AV_CODEC_ID_RV60_fuzzer: Heap-buffer-overflow in decode_4x4_block

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4710055187906560 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDRV60fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

kernel: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI component. A null pointer dereference occurs in the hcireadsupportedcodecs function because hcicmdsyncsk incorrectly returns a NULL value for unknown opcodes. A local attacker with low privileges could exploit this...

SUSE CVE-2024-47602

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gstmatroskademuxaddwvpkheader function within matroska-demux.c. This function does not properly check the validity of the stream-codecpriv pointer in th...

SUSE CVE-2024-47834

GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the processing of CodecPrivate elements in Matroska streams. In the GSTMATROSKAIDCODECPRIVATE case within the gstmatroskademuxparsestream function, a dat...

DEBIAN-CVE-2024-47602

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gstmatroskademuxaddwvpkheader function within matroska-demux.c. This function does not properly check the validity of the stream-codecpriv pointer in th...