CVE-2026-49035 Stack-based Buffer Overflow in MZ Automation libIEC61850

The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution RCE has been demonstrated when ASLR is disabled; memory corruption or denial of service may occur in configurations where ASLR is enabled...

PT-2026-64176

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A NULL pointer dereference occurs in the MMS Write Named Variable List handler. A network adjacent attacker can cause the server to crash by sending a WriteReque...

CVE-2026-28587

CVE-2026-28587 affects the MmsSmsProvider component (MmsSmsProvider.java), enabling local information disclosure via a missing permission check. Exploitation requires no user interaction and does not require additional privileges; impact is confined to information disclosure. The vulnerability is...

CVE-2025-48609

In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not...

CVE-2025-48609

In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not...

EUVD-2025-208209

In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not...

ASB-A-414388731

In multiple functions of MmsProvider.java, there is a possible way to arbitrarily delete files which affect telephony, SMS, and MMS functionalities due to a path traversal error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not...

UBUNTU-CVE-2025-51602

mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...

CVE-2025-51602

mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...

VideoLAN VLC Media Player buffer error vulnerability

VideoLAN VLC Media Player is a free, open-source cross-platform multimedia player developed by the French company VideoLAN. It is also a multimedia framework. This product supports playback of various media types such as files and discs and various audio/video formats such as WMV and MP3. Version...

CVE-2025-51602

mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...

EUVD-2025-37065

Malicious code in mms-ref-dedserver npm...

EUVD-2025-37063

Malicious code in mms-simulation npm...

EUVD-2025-37064

Malicious code in mms-service npm...

Malicious code in mms-ref-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3d204e0f49cb41d203a04419909bce2a366f33ab7859b4e1977374ec1db93e The package mms-ref-client was found to contain malicious code...

Malicious code in mms-ref-dedserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93da1778cc346bce6d2f674c1b600f0b6d8ea31cd2ee84b0f5d2f22df220ce3a The package mms-ref-dedserver was found to contain malicious code...

EUVD-2025-37066

Malicious code in mms-ref-client npm...

MAL-2025-49230 Malicious code in mms-simulation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05f92c3ffc5ed97302ac873fd40030318d8d2d89d267c615a2b1309d5fd047b The package mms-simulation was found to contain malicious code...

EUVD-2025-37061

Malicious code in mms-tools npm...

Malicious code in mms-thin-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57427ccebae288ec20571b2713f7e71b7cf97044e30896db254f9371e32764f3 The package mms-thin-client was found to contain malicious code...