EUVD-2010-2582

Malware in sbrugna...

EUVD-2023-47954

Malicious code in bioql PyPI...

EUVD-2022-27238

Malicious code in bioql PyPI...

CVE-2010-2578

Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, and RealPlayer Enterprise 2.1.2 allows remote attackers to have an unspecified impact via a crafted QCP file...

qcp has possible crash/DOS in some build configurations

Nature of issue: Crash Denial of Service Source of issue: Dependent package ring Affected versions of qcp: 0.1.0-0.3.2 Recommendation: Upgrade to qcp 0.3.3 or later Who is affected All versions of qcp from 0.1.0 to 0.3.2 are affected, but only if built with runtime overflow checks. Released qcp...

GHSA-FMWF-C46W-R8QM qcp has possible crash/DOS in some build configurations

Nature of issue: Crash Denial of Service Source of issue: Dependent package ring Affected versions of qcp: 0.1.0-0.3.2 Recommendation: Upgrade to qcp 0.3.3 or later Who is affected All versions of qcp from 0.1.0 to 0.3.2 are affected, but only if built with runtime overflow checks. Released qcp...

PT-2025-10558

Name of the Vulnerable Software and Affected Versions qcp versions 0.1.0 through 0.3.2 Description The issue is a crash, or Denial of Service, caused by a dependent package called ring. This crash can be induced by a specially-crafted packet and happens naturally approximately every 1 in 232...

CVE-2022-22084

Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

ffmpeg:ffmpeg_dem_QCP_fuzzer: Use-of-uninitialized-value in qcp_read_header

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4647386712965120 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegdemQCPfuzzer Job Type: libfuzzermsanffmpeg Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

CVE-2023-43548

Memory corruption while parsing qcp clip with invalid chunk data size...

Memory corruption

Memory corruption while parsing qcp clip with invalid chunk data size...

CVE-2023-43548

CVE-2023-43548 describes memory corruption when parsing a qcp clip with an invalid chunk data size, affecting Qualcomm chipset components (notably Qualcomm closed-source components) per the CVE entry. The NVD notes a high-severity impact with a CVSSv3.1 base score of 9.8 (Network, High confidenti...

CVE-2023-43548 Buffer Copy Without Checking Size of Input in Video

Memory corruption while parsing qcp clip with invalid chunk data size...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets due to a memory corruption when parsing a qcp clip with an invalid block data size...

CVE-2023-43548: Buffer Copy without Checking Size of Input

Memory corruption while parsing qcp clip with invalid chunk data size...

CVE-2022-22084

Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

Memory corruption

Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-22084

CVE-2022-22084: Memory corruption occurs when extracting qcp audio files due to a missing data-length check in Qualcomm Snapdragon components (Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music, Wearables). Affected are Qualcomm Snapdragon environments; root cause is...

CVE-2022-22084

Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2022-22084: Out-of-bounds Write

Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...