982 matches found
Malicious code in node-youtube-dash-sidx (npm)
The package node-youtube-dash-sidx was found to contain malicious code...
MAL-2025-27665 Malicious code in node-youtube-dash-sidx (npm)
The package node-youtube-dash-sidx was found to contain malicious code...
MAL-2025-9798 Malicious code in @zalastax/nolb-_b3 (npm)
The package @zalastax/nolb-b3 was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2025-7797
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gfdashdownloadinitsegment of the file...
CVE-2025-38300 affecting package kernel for versions less than 6.6.96.1-1
CVE-2025-38300 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...
PT-2025-31107 · Iroad · Iroad Dash Cam Fx2
Name of the Vulnerable Software and Affected Versions: IROAD Dashcam FX2 affected versions not specified Description: A bypass of the device pairing/registration process was discovered. The HTTP server lacks restrictions, allowing direct access at http://192.168.10.1 after connecting to the...
PT-2025-40874
Name of the Vulnerable Software and Affected Versions Software versions prior to 8.0 Description An issue exists in the handling of MPEG-DASH manifests where an out-of-bounds NUL-byte write occurs one byte past the end of the buffer. This happens during the calculation of the content path. The...
DEBIAN-CVE-2025-7797
A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gfdashdownloadinitsegment of the file src/mediatools/dashclient.c. The manipulation of the argument baseiniturl leads to null pointer dereference. The attack may be launched...
UBUNTU-CVE-2025-7797
A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gfdashdownloadinitsegment of the file src/mediatools/dashclient.c. The manipulation of the argument baseiniturl leads to null pointer dereference. The attack may be launched...
GPAC 安全漏洞
GPAC is an open source multimedia framework from GPAC Open Source. A security vulnerability exists in GPAC 2.4 and earlier versions, which stems from a null pointer dereference due to incorrect manipulation of the parameter baseiniturl in the file src/mediatools/dashclient.c. The vulnerability is...
AZL-64928 CVE-2025-38347 affecting package kernel for versions less than 6.6.96.1-1
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on ino and xnid syzbot reported a f2fs bug as below: INFO: task syz-executor140:5308 blocked for more than 143 seconds. Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 0 "echo 0...
The vulnerability of the gf_dash_group_get_audio_channels() function (media_tools/dash_client.c) in the MP4Box utility of the GPAC multimedia platform allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the gfdashgroupgetaudiochannels function mediatools/dashclient.c in the MP4Box utility of the GPAC multimedia platform is related to the pointer manipulation during the processing of DASH manifests. Exploiting this vulnerability could allow an attacker to execute arbitrary co...
The vulnerability of the gf_dash_group_get_audio_channels() function (media_tools/dash_client.c) in the MP4Box utility of the GPAC multimedia platform allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the gfdashgroupgetaudiochannels function mediatools/dashclient.c in the MP4Box utility of the GPAC multimedia platform is related to the pointer manipulation during the processing of DASH manifests. Exploiting this vulnerability could allow an attacker to execute arbitrary co...
SUSE CVE-2025-5641
A vulnerability was found in Radare2 5.9.9. It has been rated as problematic. This issue affects the function rconsisbreaked in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local...
Radare2 缓冲区错误漏洞
Radare2 is a Libre reverse framework open-sourced by Radare for Unix geeks. A buffer error vulnerability exists in Radare2 version 5.9.9, which stems from memory corruption due to incorrect manipulation of the parameter -T...
Radare2 缓冲区错误漏洞
Radare2 is a Libre reverse framework for Unix geeks open-sourced by Radare. A buffer error vulnerability exists in Radare2 version 5.9.9, which stems from the mishandling of the parameter -T by the function consstackload in the component radare2, which could lead to memory corruption...
CVE-2025-31049
Deserialization of Untrusted Data vulnerability in themeton Dash allows Object Injection. This issue affects Dash: from n/a through 1.3...
CVE-2025-31049
Deserialization of Untrusted Data vulnerability in themeton Dash allows Object Injection. This issue affects Dash: from n/a through 1.3...
