CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets except when the relay is configured for strict source and learning disabled. Version 13.4.1...

Use After Free

Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Use After Free via MediaStreamTrackImpl. An attacker can cause heap corruption by enticing a user to visit a specially...

SUSE CVE-2025-8292

Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-8292

Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2025-8292

Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-8292

Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-8292

Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-8292

Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-8292

Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-8292

Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-8292

A use after free vulnerability in the MediaStream interface of Google Chrome (prior to version 138.0.7204.183 ) allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability is also present in Microsoft Edge browsers. Exploitation of this memory manag...

Google Chrome 安全漏洞

Google Chrome is a free web browser developed by Google. It is the world's largest browser in terms of market share due to its speed, security, simplicity, multi-platform support and built-in privacy protection. Google Chrome suffers from a post-release reuse vulnerability that stems from a...

CVE-2025-8292: Use After Free

Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Google Chrome < 138.0.7204.183 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 138.0.7204.183. It is, therefore, affected by a vulnerability as referenced in the 202507stable-channel-update-for-desktop29 advisory. - Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a...

Google Chrome < 138.0.7204.183 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 138.0.7204.183. It is, therefore, affected by a vulnerability as referenced in the 202507stable-channel-update-for-desktop29 advisory. - Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a...

PT-2025-31358

Name of the Vulnerable Software and Affected Versions Chromium versions prior to 138.0.7204.183 Google Chrome versions prior to 138.0.7204.183 Microsoft Edge Chromium-based versions prior to 138.0.7204.183 openSUSE SLE-15-SP6 Fedora 41 and 42 Description A use-after-free issue exists in the Media...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. Chromium security severity: Medium...

The vulnerability of the Media Stream component of the Google Chrome browser, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the Media Stream component in the Google Chrome browser relates to the exposure of confidential information through metadata. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information via a specially created HTML page...

Google Chrome Media Stream Incorrectly Implemented Vulnerability

Google Chrome is a WEB browser developed by Google Inc. An incorrectly implemented vulnerability exists in Google Chrome Media Stream, which can be exploited by attackers to obtain sensitive information...

Chromium: CVE-2025-1921 Inappropriate Implementation in Media Stream

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...