Lucene search
K

719 matches found

Fedora
Fedora
added 2026/03/26 2:31 a.m.4 views

[SECURITY] Fedora 44 Update: wireshark-4.6.4-2.fc44

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

7.5CVSS5.9AI score0.00184EPSS
Exploits3
NVD
NVD
added 2026/03/16 2:19 p.m.3 views

CVE-2026-3085

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

8.8CVSS0.00543EPSS
Exploits0References2
OSV
OSV
added 2026/03/16 2:19 p.m.3 views

CVE-2026-3083

GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary dependin...

8.8CVSS6.3AI score
Exploits0References2
Cvelist
Cvelist
added 2026/03/13 8:41 p.m.21 views

CVE-2026-3083 GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability

GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary dependin...

8.8CVSS0.00566EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2026/03/13 8:41 p.m.3 views

CVE-2026-3083

GStreamer rtpqdm2depay Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary dependin...

8.8CVSS8.6AI score0.00566EPSS
Exploits0
Snyk
Snyk
added 2026/03/13 8:40 p.m.1 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the rtpqdm2depay module while processing X-QDM RTP payloads. An attacker can execute arbitrary code by supplying specially crafted X-QDM RTP payloads to an application that processes untrusted media streams...

8.8CVSS7.7AI score0.00543EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2026/03/13 8:40 p.m.4 views

CVE-2026-3085

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

8.8CVSS8.7AI score0.00543EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2026/03/13 8:40 p.m.3 views

CVE-2026-3085

GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

8.8CVSS6.4AI score0.00543EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/13 12:0 a.m.3 views

GStreamer 输入验证错误漏洞

GStreamer is a set of open-source frameworks for processing streaming media. GStreamer has a vulnerability related to input validation errors. This vulnerability arises from failing to validate user data when handling X-QDM RTP payload elements, which can lead to out-of-bound writes and remote co...

8.8CVSS7.6AI score0.00566EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/03/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-29068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when...

8.7CVSS5.6AI score0.00314EPSS
Exploits0References2
OSV
OSV
added 2026/03/06 7:16 a.m.5 views

DEBIAN-CVE-2026-29068

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when pjmedia-codec parses an RTP payload contain more frames than the caller-provided frames can hold. This issue has been patched in version 2.17...

7.5CVSS5.6AI score0.00314EPSS
Exploits0References1
OSV
OSV
added 2026/03/06 7:16 a.m.4 views

UBUNTU-CVE-2026-29068

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when pjmedia-codec parses an RTP payload contain more frames than the caller-provided frames can hold. This issue has been patched in version 2.17...

8.7CVSS6AI score0.00314EPSS
Exploits0References4
EUVD
EUVD
added 2026/03/06 6:36 a.m.4 views

EUVD-2026-10020

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, there is a stack buffer overflow vulnerability when pjmedia-codec parses an RTP payload contain more frames than the caller-provided frames can hold. This issue has been patched in version 2.17...

8.7CVSS6AI score0.00314EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/06 12:0 a.m.3 views

PJSIP 安全漏洞

PJSIP is an open-source, free and open-source multimedia communication library developed in C language. It implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Prior to version 2.17, PJSIP had a security vulnerability caused by a stack buffer overflow during the parsin...

8.7CVSS6.2AI score0.00314EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/06 12:0 a.m.1 views

PT-2026-23655

Name of the Vulnerable Software and Affected Versions PJSIP versions prior to 2.17 Description PJSIP is a multimedia communication library written in C. A stack buffer overflow exists in the Opus codec parser when processing RTP payloads containing more frames than the allocated buffer can handle...

8.7CVSS6.1AI score0.00314EPSS
Exploits0References9
Hacker One
Hacker One
added 2026/02/26 10:53 a.m.12 views

curl: RTSP RTP Interleaved Parser Assertion Failure (Zero-Length RTP Payload)

Summary: I am submitting this as a security issue primarily due to how it was discovered and that it's my first Curl submission, but I suspect I might be overly cautious here. This issue was discovered as part of the AIXCC competition, and I am assisting on reporting true positive findings to...

5.9AI score
Exploits0
OSV
OSV
added 2026/02/20 1:15 a.m.5 views

ALPINE-CVE-2026-26967

PJSIP is a free and open source multimedia communication library written in C. In versions 2.16 and below, there is a critical Heap-based Buffer Overflow vulnerability in PJSIP's H.264 unpacketizer. The bug occurs when processing malformed SRTP packets, where the unpacketizer reads a 2-byte NAL...

5.3CVSS5.7AI score0.0029EPSS
Exploits0References1
OSV
OSV
added 2026/01/26 4:16 a.m.6 views

CVE-2026-1417

A weakness has been identified in GPAC up to 2.4.0. Affected by this issue is the function dumpisomrtp of the file applications/mp4box/filedump.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and coul...

3.3CVSS5.4AI score
Exploits0References7
NVD
NVD
added 2026/01/26 4:16 a.m.11 views

CVE-2026-1417

A weakness has been identified in GPAC up to 2.4.0. Affected by this issue is the function dumpisomrtp of the file applications/mp4box/filedump.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and coul...

4.8CVSS0.00196EPSS
Exploits1References7
Cvelist
Cvelist
added 2026/01/26 3:32 a.m.34 views

CVE-2026-1417 GPAC filedump.c dump_isom_rtp null pointer dereference

A weakness has been identified in GPAC up to 2.4.0. Affected by this issue is the function dumpisomrtp of the file applications/mp4box/filedump.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and coul...

4.8CVSS0.00196EPSS
Exploits1References7
Rows per page
Query Builder