Lucene search
+L

2499 matches found

Cvelist
Cvelist
•added 2022/04/06 12:00 a.m.•43 views

CVE-2022-24786 Potential out-of-bound read/write in PJSIP

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI Reference Picture Selection Indication packet, but any app that directly uses pjmediartcpfbparserpsi will be affected. A patch is available in the...

9.8CVSS9.7AI score0.0205EPSS
SaveExploits0References5
OSV
OSV
•added 2022/04/06 12:00 a.m.•34 views

CVE-2022-24786 Potential out-of-bound read/write in PJSIP

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI Reference Picture Selection Indication packet, but any app that directly uses pjmediartcpfbparserpsi will be affected. A patch is available in the...

9.8CVSS9.1AI score
SaveExploits0References7
AlpineLinux
AlpineLinux
•added 2022/04/06 12:00 a.m.•114 views

CVE-2022-24786

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI Reference Picture Selection Indication packet, but any app that directly uses pjmediartcpfbparserpsi will be affected. A patch is available in the...

9.8CVSS9.6AI score0.0205EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/04/06 12:00 a.m.•17 views

The vulnerability of the gf_m2ts_section_complete function in the media_tools/mpegts component of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfm2tssectioncomplete function in the mediatools/mpegts component of the GPAC multimedia platform is related to writing beyond buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created MP4 file...

7.1CVSS6.1AI score0.00959EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/04/06 12:00 a.m.•15 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s function decoding process allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s functionality-related decoding process is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its...

9.3CVSS7.6AI score0.01993EPSS
SaveExploits1References9Affected Software4
Debian CVE
Debian CVE
•added 2022/04/06 12:00 a.m.•74 views

CVE-2022-24786

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI Reference Picture Selection Indication packet, but any app that directly uses pjmediartcpfbparserpsi will be affected. A patch is available in the...

9.8CVSS8.4AI score0.0205EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•20 views

The vulnerability of the strdup function in the box_code_base.c component of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the strdup function in the boxcodebase.c component of the GPAC multimedia platform is related to incorrect handling of a string that is not terminated with '\x00'. Exploiting this vulnerability allows an attacker to cause service interruptions...

7.8CVSS7.2AI score0.01121EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•22 views

The vulnerability of the decoder for the MPEG-4 multimedia platform GPAC’s decoding function allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the CSGP decoder for MPEG-4 multimedia platform GPAC is related to the lack of verification for the result of arithmetic operations. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failure...

10CVSS7.6AI score0.01695EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•13 views

The vulnerability of the afra_box_read function in the MP4Box component of the GPAC multimedia platform allows a hacker to gain access to confidential data.

The vulnerability of the afraboxread function in the MP4Box component of the GPAC multimedia platform involves the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data through a specially created file...

7.1CVSS7.2AI score0.00992EPSS
SaveExploits1References6Affected Software3
CNNVD
CNNVD
•added 2022/04/04 12:00 a.m.•19 views

GPAC 安全漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC. No information about the vulnerability is available at this time, so please stay tuned to CNNVD or vendor announcements...

5.5CVSS6.7AI score0.00834EPSS
SaveExploits1References6
CNVD
CNVD
•added 2022/04/01 12:00 a.m.•50 views

GPAC Denial of Service Vulnerability (CNVD-2022-25784)

GPAC is an open source multimedia framework. GPAC suffers from a denial-of-service vulnerability that stems from the presence of a null pointer dereference in the program. An attacker could exploit this vulnerability to cause the program to crash...

5.6CVSS4.5AI score0.00752EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/03/31 12:00 a.m.•36 views

PJSIP Denial of Service Vulnerability

PJSIP is a free open source multimedia communications library written in C. A denial-of-service vulnerability exists in PJSIP that could be exploited by attackers to affect PJSIP users who use PJSIP XML parsing in their applications...

7.5CVSS3.9AI score0.02063EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/03/30 12:00 a.m.•16 views

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. GPAC suffers from a denial-of-service vulnerability that stems from the presence of a null pointer dereference in the program. An attacker could exploit this vulnerability to cause the program to crash...

5.6CVSS5.7AI score0.00752EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
•added 2022/03/30 12:00 a.m.•87 views

CVE-2022-24763

PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior contain a denial-of-service vulnerability that affects PJSIP users that consume PJSIP's XML parsing in their apps. Users are advised to update. There are no known workarounds...

7.5CVSS8.6AI score0.02063EPSS
SaveExploits0
Debian
Debian
•added 2022/03/28 2:23 p.m.•296 views

[SECURITY] [DLA 2962-1] pjproject security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2962-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 28, 2022 https://wiki.debian.org/LTS -...

9.8CVSS10AI score0.04583EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2022/03/25 12:00 a.m.•20 views

The vulnerability of the `pjsua_recorder_create` function in the multimedia communication library PJSIP, related to reading beyond the buffer limit in memory, allows attackers to cause service failures.

The vulnerability of the pjsuarecordercreate function in the PJSIP multimedia communication library is related to reading beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS8.2AI score0.02179EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/03/25 12:00 a.m.•15 views

The vulnerability of the pjsua_call_dump function in the multimedia communication library PJSIP, related to the execution of operations outside the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of the pjsuacalldump function in the multimedia communication library PJSIP is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.7AI score0.02356EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/03/25 12:00 a.m.•19 views

The vulnerability of the PJSIP multimedia communication library, related to buffer overflow in the stack, allows an attacker to execute arbitrary code.

The vulnerability of the PJSIP multimedia communication library is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.7AI score0.02493EPSS
SaveExploits0References6Affected Software3
CNVD
CNVD
•added 2022/03/23 12:00 a.m.•71 views

GPAC has an unspecified vulnerability (CNVD-2022-22300)

GPAC is an open-source multimedia framework. there is a security vulnerability in MP4Box before GPAC version 2.1.0-DEV, and no detailed vulnerability details are available...

5.5CVSS5.4AI score0.00824EPSS
SaveExploits1References1
OSV
OSV
•added 2022/03/22 5:15 p.m.•5 views

ALPINE-CVE-2022-24764

PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack buffer overflow vulnerability that affects PJSUA2 users or users that call the API pjmediasdpprint, pjmediasdpmediaprint. Applications that do not use PJSUA2 and do not directly...

7.5CVSS7.3AI score0.02376EPSS
SaveExploits0References1
Rows per page
Query Builder