12 matches found
OESA-2026-3114 pipewire security update
is a server and user space API to deal with multimedia pipelines,contains command line utilities. Security Fixes: RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return.CVE-2026-14324...
EUVD-2026-41006
RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return...
PT-2026-54643
Name of the Vulnerable Software and Affected Versions RAOP module affected versions not specified Description The RAOP module accepts unbounded Content-Length values and fails to verify the return value of the pw array add function. This lack of validation can lead to memory management issues whe...
freerdp: FreeRDP: Denial of Service via crafted audio data in RDP
A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol RDP. A remote attacker can exploit a sizet underflow vulnerability in the IMA-ADPCM and MS-ADPCM audio decoders by sending specially crafted audio data over the RDPSND audio channel. This underflow leads to a...
[SECURITY] Fedora 41 Update: kappanhang-0-0.3.20250427gitdffb773.fc41
Remotely open audio channels and a serial port to an Icom RS-BA1 server for ex. Icom IC-705 transceiver...
CVE-2021-38546
CREATIVE Pebble devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the intensit...
CVE-2021-38544
Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, t...
CVE-2021-38547
Logitech Z120 and S120 speakers through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the...
Amcrest Technologies IP Camera Unauthenticated Remote Audio Streaming Vulnerability
The remote installation of Amcrest Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...
Unauthorized access vulnerability in Xiaomi ai speakers
Xiaomi ai speaker is a smart speaker product from Xiaomi. Xiaomi ai speaker has an unauthorized access vulnerability that can be exploited by an attacker to control the speaker to play remote and local arbitrary audio files...
Nortel Networks - Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerabilities
source: https://www.securityfocus.com/bid/26120/info Multiple Nortel Networks UNIStim VoIP telephony products are prone to a remote vulnerability that may allow eavesdropping. Attackers can exploit this issue to open an audio channel with the phone's microphone. This will allow attackers to...
