GO SMS Pro Android App Exposes Private Photos, Videos and Messages

A security weakness discovered in the GO SMS Pro Android app can be exploited to publicly expose media sent using the app, according to researchers. The GO SMS Pro application is a popular messenger app with more than 100 million downloads from the Google Play store. Researchers at Trustwave...

SQL Injection Vulnerability in Multimedia Library of Jiangsu Suqian Jindian Technology Co.

Jiangsu Suqian Jindian Technology Co., Ltd. is a private high-tech company, the company is committed to education informatization, library management informatization and library equipment research and development and production, and provide comprehensive solutions. A SQL injection vulnerability...

Denial of Service Vulnerability in Rexchip Microelectronics Corporation's Rexchip Chip

Focusing on mobile Internet and digital multimedia chip design, Rexchip is a professional SOC solution provider for personal mobile information terminals. A denial-of-service vulnerability exists in Ruixin Microelectronics Corporation's Ruixin Micro chip, which can be exploited by attackers to...

Apple Safari Input Validation Error Vulnerability

Apple Safari is a web browser from Apple, Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in Apple Safari versions prior to 13.0.5, which stems from a logic issue where URL schemes may be incorrectly ignored when determining...

Moderate: Red Hat Security Advisory: SDL security update

An update for SDL is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

ALSA-2020:4629 Moderate: libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fixes: libvpx: Double free in ParseContentEncodingEntry in mkvparser.cc CVE-2019-2126 libvpx: Out of bounds read in vp8nor...

Moderate: SDL security update

Simple DirectMedia Layer SDL is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device. Security Fixes: SDL: buffer over-read in IMAADPCMnibble in audio/SDLwave.c CVE-2019-7572 SDL: heap-based buffer overflow in MSADPCMdecode in...

CVE-2020-3852

A logic issue was addressed with improved validation. This issue is fixed in Safari 13.0.5. A URL scheme may be incorrectly ignored when determining multimedia permission for a website...

CVE-2020-3852

A logic issue was addressed with improved validation. This issue is fixed in Safari 13.0.5. A URL scheme may be incorrectly ignored when determining multimedia permission for a website...

Input validation

A logic issue was addressed with improved validation. This issue is fixed in Safari 13.0.5. A URL scheme may be incorrectly ignored when determining multimedia permission for a website...

CVE-2020-3852

A logic issue was addressed with improved validation. This issue is fixed in Safari 13.0.5. A URL scheme may be incorrectly ignored when determining multimedia permission for a website...

CVE-2020-3852

CVE-2020-3852 is an Apple Safari/WebKit vulnerability where a logic issue in URL scheme handling caused the scheme to be incorrectly ignored when determining multimedia permissions for a website. Affected product/version: Safari 13.0.5 (and related WebKit handling described in the Apple advisory)...

Vulnerabilities of operating systems tvOS, iOS, iCloud for Windows service, Safari browser, and iTunes multimedia player, related to the use of memory after its release, allowing attackers to execute arbitrary code.

Vulnerabilities of operating systems such as tvOS and iOS, the iCloud for Windows service, the Safari browser, and the multimedia player iTunes are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow a malicious actor to execute arbitrary code remotely...

SDL security update

CentOS Errata and Security Advisory CESA-2020:3868 An update for SDL is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 7 : libvpx (RHSA-2020:3876)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3876 advisory. The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimed...

Binary Vulnerability in Rexchip Microelectronics Corporation's Rexchip Chip

Focusing on mobile Internet and digital multimedia chip design, Rexchip is a professional SOC solution provider for personal mobile information terminals. A binary vulnerability exists in Rexchip Microelectronics Corporation's Rexchip microchip, which can be exploited by attackers to launch...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:1032-1 Rating: important References: 1173107 1173187 1173188 1173251 1173254 1173292 Cross-References: CVE-2020-6509 Affected Products: openSUSE Backports SLE-15-SP2 An update that solves one vulnerability an...

Command Execution Vulnerability in Smart-MDS Multimedia Command and Dispatch System of Dixin Technology (CNVD-2020-60314)

But the new technology Smart-MDS multimedia command and scheduling system with convergence access function, provide multi-service convergence of the unified scheduling management platform, access to mainstream various types of audio and video communication system functions. Smart-MDS Multimedia...

Command Execution Vulnerability in Smart-MDS Multimedia Command and Dispatch System of Dixin Technology (CNVD-2020-60313)

But the new technology Smart-MDS multimedia command and scheduling system with convergence access function, provide multi-service convergence of the unified scheduling management platform, access to mainstream various types of audio and video communication system functions. Smart-MDS Multimedia...

Command Execution Vulnerability in Smart-MDS Multimedia Command and Dispatch System of Dixin Technology (CNVD-2020-60308)

But the new technology Smart-MDS multimedia command and scheduling system with convergence access function, to provide multi-service convergence of the unified scheduling management platform, access to mainstream various types of audio and video communication systems and other functions. Smart-MD...