CVE-2023-21630

CVE-2023-21630 describes a memory corruption issue in the Multimedia Framework caused by an integer overflow when synx bind is called with synx signal. The CVE is associated with Qualcomm closed‑source components and the Multimedia Framework; public descriptions consistently cite memory corruptio...

CVE-2022-33282 Integer overflow to buffer overflow in Automotive Multimedia

Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback...

CVE-2022-33282 Integer overflow to buffer overflow in Automotive Multimedia

Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback...

CVE-2022-33282

CVE-2022-33282 affects Qualcomm Automotive Multimedia (chipset) where an integer overflow during IOCTL calls in video playback causes memory corruption. Root cause: overflow turning into buffer overflow within IOCTL handling. Impact per CVSS is high on confidentiality, integrity, and availability...

PT-2023-13287 · Unknown · Automotive Multimedia

Name of the Vulnerable Software and Affected Versions: Automotive Multimedia affected versions not specified Description: The issue is related to memory corruption in Automotive Multimedia, caused by an integer overflow leading to a buffer overflow during IOCTL calls in video playback...

gpac 安全漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in gpac versions prior to 2.4.0 that stems from the presence of a buffer overflow...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. A resource management error vulnerability exists in versions of gpac prior to 2.4.0. An attacker could exploit this vulnerability to cause a denial of service on the system...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. A resource management error vulnerability exists in GPAC version 2.3-DEV-rev35-gbbca86917-master, which stems from a security issue in the function gfav1resetstate in the file mediatools/avparsers.c, resulting in a double release...

USN-5958-1: FFmpeg vulnerabilities

It was discovered that FFmpeg could be made to dereference a null pointer. An attacker could possibly use this to cause a denial of service via application crash. These issues only affected Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. CVE-2022-3109, CVE-2022-3341 It...

CVE-2023-27585

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to...

[SECURITY] Fedora 38 Update: xine-lib-1.2.13-1.fc38

This package contains the Xine library. It can be used to play back various media, decode multimedia files from local disk drives, and display multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some uncommon formats, too...

[SECURITY] Fedora 38 Update: qt6-qtmultimedia-6.4.2-4.fc38

The Qt Multimedia module provides a rich feature set that enables you to easily take advantage of a platforms multimedia capabilites and hardware. This ranges from the playback and recording of audio and video content to the use of available devices like cameras and radios...

[SECURITY] Fedora 38 Update: mlt-7.14.0-2.fc38

MLT is an open source multimedia framework, designed and developed for television broadcasting. It provides a toolkit for broadcasters, video editors,media players, transcoders, web streamers and many more types of applications. The functionality of the system is provided via an assortment of rea...

[SECURITY] Fedora 38 Update: ffmpeg-6.0-1.fc38

FFmpeg is a leading multimedia framework, able to decode, encode, transcode, mux, demux, stream, filter and play pretty much anything that humans and machines have created. It supports the most obscure ancient formats up to the cutting edge. No matter if they were designed by some standards...

Fedora: Security Advisory for ffmpeg (FEDORA-2023-a5e10b188a)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Researchers Uncover Over a Dozen Security Flaws in Akuvox E11 Smart Intercom

More than a dozen security flaws have been disclosed in E11, a smart intercom product made by Chinese company Akuvox. "The vulnerabilities could allow attackers to execute code remotely in order to activate and control the device's camera and microphone, steal video and images, or gain a network...

Debian: Security Advisory (DLA-515-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-464-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1611)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 36 : webkit2gtk3 (2023-efe0594c2b)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-efe0594c2b advisory. Fix large memory allocation when uploading content. Fix scrolling after a history navigation with PSON enabled. Always update the active uri of...