SUSE-SU-2025:02777-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. bsc1247564 - CVE-2025-31278: Fixed a vulnerability where processing maliciously crafted web...

Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Updated to version 2.48.5: - CVE-2025-31273: Fixed a vulnerability where processing maliciously crafted web content could lead to memory corruption. bsc1247564 - CVE-2025-31278: Fixed a vulnerability where processing maliciously crafted web...

CVE-2025-54639

ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions...

CVE-2025-54640

ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions...

Fedora 42 : webkitgtk (2025-61ca72f430)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-61ca72f430 advisory. Update to 2.48.5. Changes since 2.48.3: Improve emoji font selection. Improve playback of multimedia streams from blob URLs. Fix crash when using a...

CVE-2025-54640

ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions...

CVE-2025-54640

ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions...

CVE-2025-54639

ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions...

CVE-2025-54639

ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions...

CVE-2025-54640

ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions...

CVE-2025-54640

ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions...

CVE-2025-54640

CVE-2025-54640 concerns a ParcelMismatch vulnerability in attribute deserialization impacting Huawei HarmonyOS. The issue is described as causing playback control screen display exceptions when exploited. Connected sources consistently reference the root cause as ParcelMismatch and the observed i...

CVE-2025-54639

ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cause playback control screen display exceptions...

CVE-2025-54639

CVE-2025-54639 corresponds to a ParcelMismatch vulnerability in attribute deserialization affecting Huawei HarmonyOS. Elevated risk is limited to local exploitation with low privileges and no user interaction required, potentially causing playback control screen display exceptions (availability i...

The vulnerability of the CoreMedia Playback component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CoreMedia Playback component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2025-32084 · Parcel · Parcel

Name of the Vulnerable Software and Affected Versions: Parcel affected versions not specified Description: A ParcelMismatch vulnerability exists in attribute deserialization. Successful exploitation of this issue may cause exceptions in the playback control screen display. Recommendations: At the...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which can be exploited by an attacker to cause the playback control screen to display abnormally...

PT-2025-32083 · Parcel · Parcel

Name of the Vulnerable Software and Affected Versions: Parcel affected versions not specified Description: A ParcelMismatch vulnerability exists in attribute deserialization. Successful exploitation of this issue may cause exceptions in the display of the playback control screen. Recommendations:...

WordPress Easy Video Player Wordpress & WooCommerce Path Traversal Vulnerability

WordPress Easy Video Player Wordpress&WooCommerce is a responsive video player plugin designed for WordPress and WooCommerce, supporting local video playback, cloud platform video streaming, 360 degree video and virtual reality playback. WordPress Easy Video Player Wordpress&WooCommerce suffers...

PT-2025-35979

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The snd soc remove pcm runtime function may be called with rtd equal to NULL, leading to a null pointer dereference. This issue was reproduced during topology loading and when a link was...