CVE-2022-22103

CVE-2022-22103 describes a memory corruption vulnerability in the Snapdragon Auto multimedia driver caused by a double free when handling data from user space. The issue enables local exploitation with a low attack complexity and no authentication, potentially affecting confidentiality, integrity...

PT-2022-15239

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto affected versions not specified Description The issue is related to memory corruption in the multimedia driver due to a double free error when processing user data. This problem is associated with the Snapdragon Auto...

CVE-2022-22103: Double Free

Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon Auto...

USN-5167-1: FFmpeg vulnerabilities

It was discovered that FFmpeg did not properly verify certain input when processing video and audio files. An attacker could possibly use this to send specially crafted input to the application, force a division by zero, and cause a denial of service application crash. CVE-2020-20445,...

DEBIAN-CVE-2022-31031

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions prior to and including 2.12.1 a stack buffer overflow vulnerability affects PJSIP users that use STUN in their...

Stack overflow

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions prior to and including 2.12.1 a stack buffer overflow vulnerability affects PJSIP users that use STUN in their...

CVE-2022-31031

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions prior to and including 2.12.1 a stack buffer overflow vulnerability affects PJSIP users that use STUN in their...

GPAC Denial of Service Vulnerability (CNVD-2022-66666)

GPAC is a multimedia framework. A denial of service vulnerability exists in GPAC versions prior to 1.0.1, which stems from the fact that the pre-commit version of GPAC contains a loop that cannot reach the exit condition "infinite loop" vulnerability in the ISOBMFF reader filter isoffinread.c. Th...

Qualcomm 资源管理错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and from time to time manufactured on the surface of semiconductor wafers. A resource management error vulnerability exists in a number of...

CVE-2022-31031

CVE-2022-31031 affects PJSIP (pjproject) up to version 2.12.1. Root cause: a stack-based buffer overflow when using STUN (via STUN server config or pjlib-util/stun_simple). A patch exists in commit 450baca and should be included in the next release; no workaround is documented. Upgrade to a relea...

CVE-2022-31031

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions prior to and including 2.12.1 a stack buffer overflow vulnerability affects PJSIP users that use STUN in their...

Debian DLA-3036-1 : pjproject - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3036 advisory. - PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior contain a denial-of-service vulnerability tha...

[SECURITY] [DLA 3036-1] pjproject security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3036-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA May 31, 2022 https://wiki.debian.org/LTS -...

The vulnerability of the PJSIP multimedia communication library, related to executing a loop with an unavailable exit condition, allows attackers to cause service failures.

The vulnerability of the PJSIP multimedia communication library lies in the execution of a loop with an unavailable exit condition during the processing of WAV/AVI files. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the DNS resolution implementation in the PJSIP multimedia communication library allows a perpetrator to execute arbitrary code.

The vulnerability of the DNS resolution implementation in the PJSIP multimedia communication library involves copying buffers without checking the size of the input data during DNS packet processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the PJSIP multimedia communication library, related to executing a loop with an unavailable exit condition, allows attackers to cause service failures.

The vulnerability of the PJSIP multimedia communication library is related to the execution of a loop with an unavailable exit condition during syntactic analysis of XML files. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2022-21723

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions 2.11.1 and prior, parsing an incoming SIP message that contains a malformed multipart can potentially cause...

CVE-2020-15260

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In version 2.10 and earlier, PJSIP transport can be reused if they have the same IP address + port + protocol. However, this is...

GPAC Memory Misreference Vulnerability

GPAC is an open source multimedia framework. previous versions of GPAC v2.1.0-DEV are vulnerable to a memory mis-reference vulnerability, which stems from a confusion in the program's instructions responsible for freeing memory. An attacker could exploit this vulnerability to potentially cause th...

GPAC Buffer Overflow Vulnerability (CNVD-2022-66588)

GPAC is an open source multimedia framework. GPAC 2.0.0 suffers from a buffer overflow vulnerability that stems from abuse of the Unicode utf8wcslen renamed gfutf8wcslen function in utils/utf.c. An attacker could exploit this vulnerability to cause a heap-based buffer over read...