2449 matches found
Microsoft Windows 资源管理错误漏洞
Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A resource management error vulnerability exists in Microsoft Windows Multimedia Class Scheduler Service MMCSS. An attacker could exploit the vulnerability to elevate privileges. The followin...
SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Shenzhou Vision Han Technology Co., Ltd (CNVD-C-2025-824752)
Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...
CVE-2025-7700
A flaw was found in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services and...
File upload vulnerability in the multimedia integrated service display system of Beijing Shenzhou Vision Han Technology Co., Ltd. (CNVD-C-2025-823176)
Ltd. is a deep-rooted enterprise in the field of visualization. A file upload vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to write arbitrary files...
CVE-2025-20725
In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989422)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989422 advisory. In the Linux kernel, the following vulnerability has been resolved: mmc: jz4740: Apply DMA engine limits to maximum segment size Do what is done in other DMA-enabled...
PT-2025-44964
Name of the Vulnerable Software and Affected Versions Huawei IMS affected versions not specified Description The IMS service contains a potential out-of-bounds write condition resulting from a missing bounds check. Successful exploitation could allow a remote attacker to escalate privileges. An...
[SECURITY] Fedora 42 Update: qt6-qtmultimedia-6.9.3-1.fc42
The Qt Multimedia module provides a rich feature set that enables you to easily take advantage of a platforms multimedia capabilites and hardware. This ranges from the playback and recording of audio and video content to the use of available devices like cameras and radios...
CVE-2025-12080
On Wear OS devices, when Google Messages is configured as the default SMS/MMS/RCS application, the handling of ACTIONSENDTO intents utilizing the sms:, smsto:, mms:, and mmsto: Uniform Resource Identifier URI schemes is incorrectly implemented. Due to this misconfiguration, an attacker capable of...
The vulnerability of the dump_isom_saps function in the MP4Box utility of the GPAC multimedia platform allows a hacker to cause a service failure.
The vulnerability of the dumpisomsaps function in the MP4Box multimedia platform of GPAC involves the pointer to the null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2024-55568
A security vulnerability exists in several Samsung products, including Mobile Processor , Wearable Processor , and various Modem/Exynos models (e.g., Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, Modem 5123, 5300, and 5400). The root cause is a mis...
JLSEC-2025-105 FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in...
FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645parse because allocrbspbuffer in libavcodec/h2645parse.c mishandles rbspbuffer...
CVE-2025-56316
A SQL injection vulnerability in the contenttitle parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to execute arbitrary SQL queries via unsanitized input in the FreeMarker template rendering...
The vulnerability of the CADImage plugin in the IrfanView software, which is used for viewing and playing graphic, video, and audio files, allows a hacker to execute arbitrary code.
The vulnerability of the CADImage plugin in IrfanView, a program for viewing and playing graphic, video, and audio files, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially...
The vulnerability of the process_frame_obj function in the FFmpeg multimedia library allows a hacker to execute arbitrary code.
The vulnerability of the processframeobj function in the FFmpeg multimedia library relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the dwa_uncompress() function in the OpenEXR File Decoder component of the FFmpeg multimedia library allows a malicious actor to execute arbitrary code.
The vulnerability of the dwauncompress function in the OpenEXR File Decoder component of the FFmpeg multimedia library lies in the fact that the operation’s output goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the uncompressed_data function in the FFmpeg multimedia library allows a hacker to execute arbitrary code.
The vulnerability of the uncompresseddata function in the FFmpeg multimedia library relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the GPAC multimedia platform, related to executing a loop with an unavailable exit condition, allows a perpetrator to cause a service failure.
The vulnerability of the GPAC multimedia platform is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
