EUVD-2022-41776

Malicious code in bioql PyPI...

EUVD-2024-54634

Malicious code in bioql PyPI...

EUVD-2022-43799

Malicious code in bioql PyPI...

EUVD-2025-30999

Malicious code in bioql PyPI...

EUVD-2022-26904

Malicious code in bioql PyPI...

EUVD-2024-54633

Malicious code in bioql PyPI...

EUVD-2025-23331

Malicious code in bioql PyPI...

EUVD-2025-20492

Malicious code in bioql PyPI...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from not properly handling payload length when decoding RTP packets, which could lead to information disclosure...

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A buffer error vulnerability exists in Qualcomm Chipsets that stems from the UE improperly handling RTP packets when reorganizing NALUs, which could lead to memory corruption...

PT-2025-39269

Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description An information disclosure issue exists while decoding an RTP packet received by a User Equipment UE from the network. This occurs when the payload length indicated in the packe...

Linux Distros Unpatched Vulnerability : CVE-2019-15048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer overflow in the AP4RtpAtom class at Core/Ap4RtpAtom.cpp. CVE-2019-15048 Note that Nessus...

CVE-2025-54995

CVE-2025-54995 affects Asterisk (open source private branch exchange). The vulnerability arises from a lack of session termination, allowing RTP UDP ports and internal resources to leak, which could lead to resource exhaustion. Debian and other advisories state this was fixed in Asterisk versions...

Asterisk 安全漏洞

Asterisk is an Asterisk open source software for PBX systems that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols. Asterisk version 18.26.4 and versions prior to 18.9-cert17 have a security vulnerability that stems from a lack of session termination, which could lead to the...

Linux Distros Unpatched Vulnerability : CVE-2022-39269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. When processing certain packets, PJSIP may incorrectly switch from using SRTP med...

Linux Distros Unpatched Vulnerability : CVE-2022-21722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN,...

CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets except when the relay is configured for strict source and learning disabled. Version 13.4.1...

CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core can allow remote attackers to inject or intercept RTP/SRTP streams via RTP packets. The issue is mitigated in 13.4.1.1 by changing the heuristic exposure to the first five packe...

CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets except when the relay is configured for strict source and learning disabled. Version 13.4.1...

CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets except when the relay is configured for strict source and learning disabled. Version 13.4.1...