Bluetooth-Crash-CVE-2017-0785

CVE-2017-0785 Bluetooth module crash This script is a modified version of https://github.com/ojasookert/CVE-2017-0785. It leaks information via SDP due to out-of-bound bytes, but sending too many packets or search requests causes the Bluetooth module on an Android smartphone above Android 4.0 to...

CVE-2026-125193

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in bitpackeddecodeuyvy422 in libavcodec/bitpackeddec.c because it never verifies packets hold width height 2 bytes. Attackers can supply truncated bitpacked UYVY422 packets via crafted SDP/RFC 4175 RTP sessions or raw input to cras...

CVE-2026-125193 FFmpeg through 9.0.2 Out-of-Bounds Read via bitpacked_decode_uyvy422()

FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in bitpackeddecodeuyvy422 in libavcodec/bitpackeddec.c because it never verifies packets hold width height 2 bytes. Attackers can supply truncated bitpacked UYVY422 packets via crafted SDP/RFC 4175 RTP sessions or raw input to cras...

CVE-2026-115928

A flaw was found in FreeSWITCH. A remote attacker can cause a Denial of Service DoS by sending a specially crafted Session Description Protocol SDP message containing a zero-length key and salt in the crypto attribute. This triggers an integer underflow that overflows a stack buffer with decoded...

CVE-2026-115928

Prior to version 1.11.2 , FreeSWITCH is vulnerable to a stack buffer overflow when parsing the SDP a=crypto attribute on inbound calls. The root cause is located in the switch_core_media_add_crypto() function, where passing a zero-length key and salt from the attribute causes an integer underflow...

CVE-2026-115928 FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound calls

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, switchcoremediaaddcrypto passed the encoded key and salt length from an inbound SDP a=crypto...

CVE-2026-115928 FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound calls

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, switchcoremediaaddcrypto passed the encoded key and salt length from an inbound SDP a=crypto...

CVE-2026-48179

In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service...

CVE-2025-66368

Incorrect handling of SDP payload leads to a Denial of Service...

CVE-2025-66368

The SAMSUNG Exynos 1080 is affected by a vulnerability related to improper exception handling . This issue stems from the inadequate processing of SDP payloads , which can result in a Denial of Service (DoS) . While the technical root cause is identified as improper handling of these payloads, sp...

CVE-2025-66368

Incorrect handling of SDP payload leads to a Denial of Service...

CVE-2025-66368

Incorrect handling of SDP payload leads to a Denial of Service...

EUVD-2025-211263

Incorrect handling of SDP payload leads to a Denial of Service...

CVE-2026-48179

In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service...

CVE-2026-48179

A vulnerability exists in the Exynos modem's IMS stack due to improper handling of SDP payloads , which can lead to a Denial of Service (DoS). This issue is specifically identified in the Samsung Exynos 1080 chipset. The vulnerability stems from an input validation error (CWE-1286) within the pro...

CVE-2026-48179

In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service...

EUVD-2026-117273

In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service...

PT-2026-137357

Name of the Vulnerable Software and Affected Versions Exynos modem affected versions not specified Description Improper handling of the Session Description Protocol SDP payload within the IP Multimedia Subsystem IMS stack leads to a Denial of Service. SDP is a standard used to describe multimedia...

PT-2026-137319

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Incorrect handling of the Session Description Protocol SDP payload leads to a Denial of Service. SDP is a standard used to describe multimedia sessions...

CVE-2023-27596

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.8 and 3.2.5, OpenSIPS crashes when a malformed SDP body is sent multiple times to an OpenSIPS configuration that makes use of the streamprocess function. This issue was discovered during coverage guided...