CVE-2023-29529

matrix-js-sdk is the Matrix Client-Server SDK for JavaScript and TypeScript. An attacker present in a room where an MSC3401 group call is taking place can eavesdrop on the video and audio of participants using matrix-js-sdk, without their knowledge. To affected matrix-js-sdk users, the attacker...

CVE-2023-40108

The Android Framework is affected by a High severity Information Disclosure vulnerability (CVE-2023-40108 ) caused by a missing permission check. This flaw allows an attacker to access media content belonging to another user, potentially leading to the exposure of sensitive information. Exploitat...