Debian: Security Advisory (DSA-5124-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5124-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5124-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 25, 2022 https://www.debian.org/security/faq -...

Design/Logic Flaw

PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects applications on a 32-bit systems that use PJSIP versions 2.12 and prior to play/read invalid WAV files. The vulnerability occurs when reading WAV file data chunks with length...

CVE-2022-24792

PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects applications on a 32-bit systems that use PJSIP versions 2.12 and prior to play/read invalid WAV files. The vulnerability occurs when reading WAV file data chunks with length...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC 2.0.0, which stems from the fact that gprtpbuilderdohevc in ietf/rtppckmpeg4.c has a heap-based buffer over-read, as shown in MP4Box...

Microsoft Windows Direct Show Remote Code Execution Vulnerability

Microsoft Windows Direct Show is an important part of the SDK for the Microsoft Windows platform, a new software development kit for multimedia applications based on Direct and COM technologies.Microsoft Windows Direct Show is vulnerable to a remote code execution vulnerability that could be...

The vulnerability of the PJSIP multimedia communication library, related to synchronization errors when using a common resource, allows attackers to trigger a service failure.

The vulnerability of the PJSIP multimedia communication library is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the PJSIP multimedia communication library, related to the execution of operations outside the buffer in memory, allows attackers to trigger a service failure.

The vulnerability of the PJSIP multimedia communication library is related to the issue of the operation exceeding the buffer boundaries in memory when processing RTP/RTCP packets. Exploiting this vulnerability could allow a malicious actor to cause service failure...

GPAC Heap Buffer Overflow Vulnerability (CNVD-2022-36041)

GPAC is an open source multimedia framework. GPAC suffers from a heap buffer overflow vulnerability, for which no detailed vulnerability details are currently available...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. GPAC suffers from a heap buffer overflow vulnerability, for which no detailed vulnerability details are currently available...

The vulnerability of the gf_media_export Filters function in the MP4Box command of the GPAC multimedia platform, which allows a violator to cause a service failure.

The vulnerability of the gf-media-export-filters function in the MP4Box module of the GPAC multimedia platform is related to pointer manipulation errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

CVE-2022-24786

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI Reference Picture Selection Indication packet, but any app that directly uses pjmediartcpfbparserpsi will be affected. A patch is available in the...

Design/Logic Flaw

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI Reference Picture Selection Indication packet, but any app that directly uses pjmediartcpfbparserpsi will be affected. A patch is available in the...

CVE-2022-24786

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI Reference Picture Selection Indication packet, but any app that directly uses pjmediartcpfbparserpsi will be affected. A patch is available in the...

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s function decoding process allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s functionality-related decoding process is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its...

CVE-2022-24786 Potential out-of-bound read/write in PJSIP

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI Reference Picture Selection Indication packet, but any app that directly uses pjmediartcpfbparserpsi will be affected. A patch is available in the...

CVE-2022-24786

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI Reference Picture Selection Indication packet, but any app that directly uses pjmediartcpfbparserpsi will be affected. A patch is available in the...

The vulnerability of the gf_m2ts_section_complete function in the media_tools/mpegts component of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfm2tssectioncomplete function in the mediatools/mpegts component of the GPAC multimedia platform is related to writing beyond buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created MP4 file...

CVE-2022-24786

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI Reference Picture Selection Indication packet, but any app that directly uses pjmediartcpfbparserpsi will be affected. A patch is available in the...

CVE-2022-24786 Potential out-of-bound read/write in PJSIP

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI Reference Picture Selection Indication packet, but any app that directly uses pjmediartcpfbparserpsi will be affected. A patch is available in the...