EUVD-2026-17729

A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4BitReader::SkipBits of the file Ap4Dac4Atom.cpp of the component DSI v1 Parser. Such manipulation of the argument npresentations leads to heap-based buffer overflow. The attack needs to be performed...

CVE-2026-5236 Axiomatic Bento4 DSI v1 Ap4Dac4Atom.cpp SkipBits heap-based overflow

A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4BitReader::SkipBits of the file Ap4Dac4Atom.cpp of the component DSI v1 Parser. Such manipulation of the argument npresentations leads to heap-based buffer overflow. The attack needs to be performed...

CVE-2026-5236 Axiomatic Bento4 DSI v1 Ap4Dac4Atom.cpp SkipBits heap-based overflow

A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4BitReader::SkipBits of the file Ap4Dac4Atom.cpp of the component DSI v1 Parser. Such manipulation of the argument npresentations leads to heap-based buffer overflow. The attack needs to be performed...

CVE-2026-5236

What is affected: Axiomatic Bento4 up to 1.6.0-641, specifically the DSI v1 Parser’s file Ap4Dac4Atom.cpp. Root cause: the AP4_BitReader::SkipBits function can be manipulated via the n_presentations argument, causing a heap-based buffer overflow. Impact: a local attack with potential heap corrupt...

CVE-2026-5236

A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4BitReader::SkipBits of the file Ap4Dac4Atom.cpp of the component DSI v1 Parser. Such manipulation of the argument npresentations leads to heap-based buffer overflow. The attack needs to be performed...

Bento4 安全漏洞

Bento4 is an open-source C++ library developed by Axiomatic Systems for reading and writing MP4 files. Versions of Bento4 prior to 1.6.0-641 contained security vulnerabilities. These vulnerabilities were caused by incorrect handling of the parameter npresentations in the AP4BitReader::SkipBits...

PT-2026-29406

A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4 BitReader::SkipBits of the file Ap4Dac4Atom.cpp of the component DSI v1 Parser. Such manipulation of the argument n presentations leads to heap-based buffer overflow. The attack needs to be performed...

CVE-2026-5236: Heap-based Buffer Overflow

A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4BitReader::SkipBits of the file Ap4Dac4Atom.cpp of the component DSI v1 Parser. Such manipulation of the argument npresentations leads to heap-based buffer overflow. The attack needs to be performed...

The vulnerability of the msm_dsi_modeset_init() function in the driver/gpu/drm/msm/dsi/dsi.c file of the Direct Rendering Infrastructure (DRI) driver in the Linux operating system’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the msmdsimodesetinit function in the driver/gpu/drm/msm/dsi/dsi.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to...

@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +4 more potentially affected by CVE-2026-27193 via @feathersjs/authentication-oauth (>=5.0.0-pre.10, <=5.0.12)

@feathersjs/authentication-oauth NPM version =5.0.0-pre.10, =2.0.4, =0.5.0, =0.5.4, =0.0.1, =2.0.4 Source cves: CVE-2026-27193 Source advisory: SNYK:JS-FEATHERSJSAUTHENTICATIONOAUTH-15325870...

The vulnerability of the nwl_dsi_bridge_mode_set() function in the drivers/gpu/drm/bridge/nwl-dsi.c driver module allows a attacker to cause a service failure.

The vulnerability of the nwldsibridgemodeset function in the drivers/gpu/drm/bridge/nwl-dsi.c driver module is related to security configuration errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

EUVD-2019-19402

Acer Launch Manager 6.1.7600.16385 contains an unquoted service path vulnerability in the DsiWMIService that allows local users to potentially execute code with elevated privileges. Attackers can exploit the unquoted path in C:\Program Files x86\Launch Manager\dsiwmis.exe to insert malicious code...

Azure Linux 3.0 Security Update: kernel (CVE-2024-57887)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57887 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm: adv7511: Fix use-after-free in...

CVE-2021-31439

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation Manager. Authentication is not required to exploit this vulnerablity. The specific flaw exists within the processing of DSI structures in Netatalk. The issue results fr...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993269)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993269 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: dsi: Prevent underflow when computing packet sizes Currently, the packet overhead is...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993198)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993198 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/mcde: Fix refcount leak in mcdedsibind Every iteration of foreachavailablechildofnode...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992610)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992610 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: dsi: Prevent underflow when computing packet sizes Currently, the packet overhead is...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992216)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992216 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: Add missing check for allocorderedworkqueue Add check for the return value of...

CVE-2022-50750

CVE-2022-50750 affects the Linux kernel: specifically the DRM SITRONIX ST7701 panel driver. The issue arises when a MIPI DSI attach fails, and the driver does not properly handle cleanup, risking a memory leak if mipi_dsi_attach() fails. The provided documents confirm the fix was implemented as p...

Linux Distros Unpatched Vulnerability : CVE-2022-50750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure In case mipidsiattach fails, call drmpanelremove to avoid memory leak. CVE-2022-50750 Note...