ROS-20230911-04

A vulnerability in the GPAC multimedia platform is related to read out of bounds. Exploitation of the vulnerability could allow an attacker to read sensitive information from other memory locations or cause a a glitch...

UBUNTU-CVE-2023-41000

GPAC through 2.2.1 has a use-after-free vulnerability in the function gfbifsflushcommandlist in bifs/memorydecoder.c...

[SECURITY] [DLA 3556-1] aom security update

Debian LTS Advisory DLA-3556-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany September 06, 2023 https://wiki.debian.org/LTS Package : aom Version : 1.0.0-3+deb10u1 CVE ID : CVE-2020-36130 CVE-2020-36131 CVE-2020-36133 CVE-2020-36135 CVE-2021-30473 CVE-2021-30474...

[SECURITY] [DSA 5490-1] aom security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5490-1 [email protected] https://www.debian.org/security/ Markus Koschany September 06, 2023 https://www.debian.org/security/faq -...

CVE-2022-33220

Information disclosure in Automotive multimedia due to buffer over-read...

Information disclosure

Information disclosure in Automotive multimedia due to buffer over-read...

CVE-2022-33220 Buffer over-read in Automotive multimedia

Information disclosure in Automotive multimedia due to buffer over-read...

CVE-2022-33220 Buffer over-read in Automotive multimedia

Information disclosure in Automotive multimedia due to buffer over-read...

CVE-2022-33220

CVE-2022-33220 describes an information disclosure due to a buffer over-read in the automotive multimedia stack built on Qualcomm chipsets. Connected sources confirm it affects Qualcomm display components and classify the vulnerability with a moderate severity (NVD: base score 5.5, local attack v...

CVE-2022-33220: Buffer Over-read

Information disclosure in Automotive multimedia due to buffer over-read...

GPAC Resource Management Error Vulnerability

GPAC is an open source multimedia framework. A resource management error vulnerability exists in versions prior to GPAC 2.3-DEV, which stems from the presence of a post-release reuse vulnerability...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a possible lack of privilege checking in the ims service...

PT-2023-5252

Name of the Vulnerable Software and Affected Versions gpac versions prior to 2.3-DEV Description The issue is related to a stack-based buffer overflow in the gpac multimedia platform, specifically in the gf bt check line function located in scene manager/loader bt.c:408. This overflow can be...

PT-2023-13242 · Unknown · Automotive Multimedia

Name of the Vulnerable Software and Affected Versions: Automotive multimedia affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in Automotive multimedia. There is no information provided about the estimated number of potentially...

GPAC Buffer Error Vulnerability

GPAC is an open source multimedia framework. A security vulnerability exists in versions prior to GPAC 2.3-DEV, which stems from an over-reading of a buffer...

GPAC Buffer Error Vulnerability

GPAC is an open source multimedia framework. A security vulnerability exists in versions prior to GPAC 2.3-DEV that stems from the presence of a stack-based buffer overflow issue...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC v2.3, which originates from the inclusion of heap reuse after release via the gfbsalign function in bitstream.c, allowing an attacker to cause a denial of service DoS by supplying a crafted file...

CVE-2023-39801

A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service DoS via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature...

Design/Logic Flaw

A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service DoS via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature...

CVE-2023-39801

CVE-2023-39801 concerns Renault Easy Link Multimedia System Software version 283C35519R, where a lack of exception handling in processing WMA files over USB plug-and-play can trigger a Denial of Service (DoS). Affected component: the Renault Easy Link multimedia software. The vulnerability arises...