EUVD-2019-14763

Malware in sbrugna...

EUVD-2022-43790

Malicious code in bioql PyPI...

CVE-2022-40515

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms...

Code injection

Nextcloud End-to-end encryption app provides all the necessary APIs to implement End-to-End encryption on the client side. By providing an invalid meta data file, an attacker can make previously dropped files inaccessible. It is recommended that the Nextcloud End-to-end encryption app is upgraded...

Nextcloud 安全漏洞

Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud End-to-end encryption app version 1.12.0 and earlier, which stems from a vulnerability that allows an attacker...

CVE-2022-40515

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms...

Double free

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms...

CVE-2022-40515 Double free in Video

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms...

CVE-2022-40515 Double free in Video

Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms...

PT-2023-13804 · Qualcomm · Snapdragon +141

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in a video component due to a double free error that occurs when playing a 3gp clip containing invalid metadata...

SUSE CVE-2015-2717

Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow and out-of-bounds read via an MP4 video file containing invalid metadata...

CVE-2022-22086

Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

PT-2022-15228 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption in video due to double free while parsing a 3gp clip with invalid meta data atoms. This affects various Qualcomm Snapdragon products,...

CVE-2019-5158

An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A specially crafted firmware update file can allow an attacker to install an older firmware version while the user thinks a newer firmware versio...

CVE-2015-2717

Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow and out-of-bounds read via an MP4 video file containing invalid metadata...

Integer overflow

Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow and out-of-bounds read via an MP4 video file containing invalid metadata...

CVE-2015-2717

Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow and out-of-bounds read via an MP4 video file containing invalid metadata...

CVE-2015-2717

CVE-2015-2717 describes an integer overflow in the libstagefright component of Mozilla Firefox before 38.0, exploitable via MP4 metadata to cause a heap-based buffer overflow or out-of-bounds read, potentially enabling remote code execution or a denial of service. Affected software is Firefox (an...

CVE-2015-2717

Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow and out-of-bounds read via an MP4 video file containing invalid metadata...