1141 matches found
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : WebKitGTK vulnerabilities (USN-6061-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6061-1 advisory. Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious...
Debian DSA-5397-1 : wpewebkit - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5397 advisory. - Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
PUB-A-270965644
In Gs101Pipeline::Update of gs101displaycolorpipeline.cc, there is a possible device reboot when watching a video due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation...
Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.8ESR) have affected APM Synthetic Playback Agent
Summary APM Synthetic Playback Agent is vulnerable to Firefox ESR CVE-2023-25730, CVE-2023-25729, CVE-2023-25742, CVE-2023-25734, CVE-2023-25738, CVE-2023-25728 . Firefox ESR is used by APM Synthetic Playback Agent for running the selenium scripts. The fix includes support for Firefox 102.8 ESR...
Security Bulletin: Multiple Vulnerabilities of Guava Google Core Libraries have affected APM Synthetic Playback Agent
Summary APM Synthetic Playback Agent is vulnerable to Google Guava CVE-2020-8908 and CVE-2018-10237. The fix includes Google Guava upgraded to guava-30.0-jre. Vulnerability Details CVEID:CVE-2020-8908 DESCRIPTION: Guava could allow a remote authenticated attacker to bypass security restrictions,...
CVE-2022-33301
Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM...
CVE-2022-33282
Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback...
Memory corruption
Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM...
Integer overflow
Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback...
CVE-2022-33301
CVE-2022-33301 is a memory corruption issue in Qualcomm audio components stemming from incorrect type conversion/cast during audio playback/capture when a crafted address is sent over AGM IPC to AGM. Affected area is Qualcomm chipsets’ audio handling; root cause is improper type handling leading ...
CVE-2022-33301 Incorrect type conversion or cast in Audio
Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM...
CVE-2022-33282 Integer overflow to buffer overflow in Automotive Multimedia
Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback...
CVE-2022-33282
CVE-2022-33282 affects Qualcomm Automotive Multimedia (chipset) where an integer overflow during IOCTL calls in video playback causes memory corruption. Root cause: overflow turning into buffer overflow within IOCTL handling. Impact per CVSS is high on confidentiality, integrity, and availability...
CVE-2022-33282 Integer overflow to buffer overflow in Automotive Multimedia
Memory corruption in Automotive Multimedia due to integer overflow to buffer overflow during IOCTL calls in video playback...
PT-2023-13287 · Unknown · Automotive Multimedia
Name of the Vulnerable Software and Affected Versions: Automotive Multimedia affected versions not specified Description: The issue is related to memory corruption in Automotive Multimedia, caused by an integer overflow leading to a buffer overflow during IOCTL calls in video playback...
PT-2023-13305 · Qualcomm · Snapdragon +14
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to memory corruption caused by incorrect type conversion or cast in audio processing. This occurs when a crafted address is sent from AGM IPC to AGM during audi...
PT-2023-22032 · Mylink · Mydlink+
Name of the Vulnerable Software and Affected Versions: MyLink infotainment system version 2021.3.26 Description: The issue allows attackers to cause a denial of service, resulting in a temporary failure of Media Player functionality, via a crafted MP3 file. Recommendations: For MyLink infotainmen...
Security Bulletin: Multiple vulnerabilities of Mozilla Firefox ESR have affected APM Synthetic Playback Agent
Summary APM Synthetic Playback Agent is vulnerable to Firefox ESR CVE-2023-23599, CVE-2023-23603, CVE-2023-23605, CVE-2023-23602, CVE-2023-23601, CVE-2023-23598. Firefox ESR is used by APM Synthetic Playback Agent for running the selenium scripts. The fix includes support for Firefox 102.7 ESR...
[SECURITY] Fedora 38 Update: xine-lib-1.2.13-1.fc38
This package contains the Xine library. It can be used to play back various media, decode multimedia files from local disk drives, and display multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some uncommon formats, too...
