EUVD-2024-54633

Malicious code in bioql PyPI...

EUVD-2025-30999

Malicious code in bioql PyPI...

EUVD-2022-41776

Malicious code in bioql PyPI...

EUVD-2025-17569

Malicious code in bioql PyPI...

EUVD-2022-26904

Malicious code in bioql PyPI...

CVE-2025-21484: Buffer Over-read

Information disclosure when UE receives the RTP packet from the network, while decoding and reassembling the fragments from RTP packet...

CVE-2025-21488: Buffer Over-read

Information disclosure while decoding this RTP packet headers received by UE from the network when the padding bit is set...

PT-2025-39269

Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description An information disclosure issue exists while decoding an RTP packet received by a User Equipment UE from the network. This occurs when the payload length indicated in the packe...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from not properly handling payload length when decoding RTP packets, which could lead to information disclosure...

CVE-2025-21487: Buffer Over-read

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length...

CVE-2025-21483: Improper Restriction of Operations within the Bounds of a Memory Buffer

Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs...

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A buffer error vulnerability exists in Qualcomm Chipsets that stems from the UE improperly handling RTP packets when reorganizing NALUs, which could lead to memory corruption...

Linux Distros Unpatched Vulnerability : CVE-2019-15048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Bento4 1.5.1.0. There is a heap-based buffer overflow in the AP4RtpAtom class at Core/Ap4RtpAtom.cpp. CVE-2019-15048 Note that Nessus...

CVE-2025-54995

CVE-2025-54995 affects Asterisk (open source private branch exchange). The vulnerability arises from a lack of session termination, allowing RTP UDP ports and internal resources to leak, which could lead to resource exhaustion. Debian and other advisories state this was fixed in Asterisk versions...

CVE-2025-54995: Improper Validation of Syntactic Correctness of Input

Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 18.26.4 and 18.9-cert17, RTP UDP ports and internal resources can leak due to a lack of session termination. This could result in leaks and resource exhaustion. This issue has been patched in versions...

Asterisk 安全漏洞

Asterisk is an Asterisk open source software for PBX systems that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols. Asterisk version 18.26.4 and versions prior to 18.9-cert17 have a security vulnerability that stems from a lack of session termination, which could lead to the...

Linux Distros Unpatched Vulnerability : CVE-2022-21722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN,...

Linux Distros Unpatched Vulnerability : CVE-2022-39269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. When processing certain packets, PJSIP may incorrectly switch from using SRTP med...

CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets except when the relay is configured for strict source and learning disabled. Version 13.4.1...

CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets except when the relay is configured for strict source and learning disabled. Version 13.4.1...