2389 matches found
CVE-2023-47857
CVE-2023-47857 affects OpenHarmony v3.2.2 and earlier. The issue is a use-after-release of a multimedia camera component pointer, enabling a local attacker to crash the camera. Root cause: pointer is released and then reused, leading to a crash (UAF) in the camera subsystem. Public references des...
PT-2024-13682 · Unknown · Openharmony
Name of the Vulnerable Software and Affected Versions: OpenHarmony versions 3.2.2 and prior Description: A local attacker can cause the multimedia player to crash by modifying a released pointer. This issue allows for a crash through specific manipulation, potentially disrupting service...
PT-2024-13683 · Unknown · Openharmony
Name of the Vulnerable Software and Affected Versions: OpenHarmony versions 3.2.2 and prior Description: The issue allows a local attacker to cause a multimedia audio crash by modifying a released pointer. Recommendations: For OpenHarmony versions 3.2.2 and prior, at the moment, there is no...
OpenHarmony Resource Management Error Vulnerability
OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony version v3.2.2 and earlier versions, which originates from the reuse of a multimedia camera component pointer after...
OpenHarmony Resource Management Error Vulnerability
OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony version v3.2.2 and earlier versions, which originates from the reuse of pointers released from a multimedia player...
OpenHarmony Resource Management Error Vulnerability
OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation OpenAtom Foundation Foundation. A security vulnerability exists in OpenHarmony version v3.2.2 and earlier versions, which originates from the reuse of pointers released from a multimedia player...
PT-2024-13605 · Unknown · Openharmony
Name of the Vulnerable Software and Affected Versions: OpenHarmony versions 3.2.2 and prior Description: The issue allows a local attacker to cause a multimedia player crash by modifying a released pointer. Recommendations: For OpenHarmony versions 3.2.2 and prior, at the moment, there is no...
The vulnerability of the FFmpeg multimedia library, related to the execution of operations beyond buffer boundaries in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the FFmpeg multimedia library relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Multimedia Console on Qnap devices allows a hacker to execute arbitrary code.
The vulnerability of the Multimedia Console on Qnap devices stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
GPAC Security Vulnerabilities
GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.3-DEV-rev617-g671976fcc-master. An attacker can exploit this vulnerability to execute arbitrary code and cause a denial of service via the str2ulong class in src/mediatools/avilib.c in gpac/MP4Box...
UNISOC Chipsets Security Vulnerability
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the ims service, with a possible method to write a privilege usage log of an application...
UNISOC Chipsets Security Vulnerability
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the ims service, with a possible method to write a privilege usage log of an application...
UNISOC Chipsets Security Vulnerability
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the IMS service, with a possible method to write a privilege usage log of an application...
CVE-2023-49699
Memory Corruption in IMS while calling VoLTE Streamingmedia Interface...
PT-2023-31301 · Asr +1 · Falcon +2
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a memory corruption problem in the IMS IP Multimedia Subsystem when calling the VoLTE Voice over LTE Streaming media Interface. No...
Diamond Sleet supply chain compromise distributes a modified CyberLink installer
Microsoft Threat Intelligence has uncovered a supply chain attack by the North Korea-based threat actor Diamond Sleet ZINC involving a malicious variant of an application developed by CyberLink Corp., a software company that develops multimedia software products. This malicious file is a legitima...
The vulnerability of the gf_isom_get_user_data() function on the GPAC multimedia platform allows a hacker to cause a service failure.
The vulnerability of the gfisomgetuserdata function on the GPAC multimedia platform is caused by buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...
GPAC Security Vulnerabilities
GPAC is an open source multimedia framework. A security vulnerability exists in GPAC version 2.3-DEV-rev617-g671976fcc-master, which stems from a memory leak vulnerability in component gfmpdparsestring mediatools/mpd.c:75...
ROS-20231120-01
Vulnerability in the gfisomgetuserdata function of the GPAC multimedia platform is related to a buffer overflow in the gpac MP4Box v.2.3-DEV-rev573-g201320819-master. Exploitation of the vulnerability could allow an attacker to cause a denial of service...