[SECURITY] [DLA 3556-1] aom security update

Debian LTS Advisory DLA-3556-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 06, 2023 https://wiki.debian.org/LTS Package : aom Version : 1.0.0-3+deb10u1 CVE ID : CVE-2020-36130 CVE-2020-36131 CVE-2020-36133 CVE-2020-36135 CVE-2021-30473 CVE-2021-30474...

[SECURITY] [DSA 5490-1] aom security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5490-1 [email protected] https://www.debian.org/security/ Markus Koschany September 06, 2023 https://www.debian.org/security/faq -...

CVE-2022-33220

Information disclosure in Automotive multimedia due to buffer over-read...

Information disclosure

Information disclosure in Automotive multimedia due to buffer over-read...

CVE-2022-33220

CVE-2022-33220 describes an information disclosure due to a buffer over-read in the automotive multimedia stack built on Qualcomm chipsets. Connected sources confirm it affects Qualcomm display components and classify the vulnerability with a moderate severity (NVD: base score 5.5, local attack v...

CVE-2022-33220 Buffer over-read in Automotive multimedia

Information disclosure in Automotive multimedia due to buffer over-read...

CVE-2022-33220 Buffer over-read in Automotive multimedia

Information disclosure in Automotive multimedia due to buffer over-read...

PT-2023-5252 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3-DEV Description: The issue is related to a stack-based buffer overflow in the gpac multimedia platform, specifically in the gf bt check line function located in scene manager/loader bt.c:408. This overflow can be...

PT-2023-13242 · Unknown · Automotive Multimedia

Name of the Vulnerable Software and Affected Versions: Automotive multimedia affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in Automotive multimedia. There is no information provided about the estimated number of potentially...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a possible lack of privilege checking in the ims service...

GPAC Resource Management Error Vulnerability

GPAC is an open source multimedia framework. A resource management error vulnerability exists in versions prior to GPAC 2.3-DEV, which stems from the presence of a post-release reuse vulnerability...

GPAC Buffer Error Vulnerability

GPAC is an open source multimedia framework. A security vulnerability exists in versions prior to GPAC 2.3-DEV that stems from the presence of a stack-based buffer overflow issue...

GPAC Buffer Error Vulnerability

GPAC is an open source multimedia framework. A security vulnerability exists in versions prior to GPAC 2.3-DEV, which stems from an over-reading of a buffer...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC v2.3, which originates from the inclusion of heap reuse after release via the gfbsalign function in bitstream.c, allowing an attacker to cause a denial of service DoS by supplying a crafted file...

CVE-2023-39801

A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service DoS via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature...

Design/Logic Flaw

A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service DoS via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature...

CVE-2023-39801

CVE-2023-39801 concerns Renault Easy Link Multimedia System Software version 283C35519R, where a lack of exception handling in processing WMA files over USB plug-and-play can trigger a Denial of Service (DoS). Affected component: the Renault Easy Link multimedia software. The vulnerability arises...

PT-2023-27110 · Renault · Renault Easy Link Multimedia System

Name of the Vulnerable Software and Affected Versions: Renault Easy Link Multimedia System Software version 283C35519R Description: The issue is related to a lack of exception handling in the software, allowing attackers to cause a Denial of Service DoS by supplying crafted WMA files when...

CVE-2023-39801

A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service DoS via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature...

The vulnerability of the software for developing and optimizing multimedia applications, Intel oneVPL GPU, allows a hacker to trigger a service failure.

The vulnerability of the software for developing and optimizing multimedia applications using Intel oneVPL GPUs is related to improper cleaning or release of resources. Exploiting this vulnerability can allow attackers to cause service failures...