25 matches found
EUVD-2014-0693
Malware in sbrugna...
EUVD-2019-2414
Malware in sbrugna...
EUVD-2022-52708
Malicious code in bioql PyPI...
EUVD-2023-28839
Malicious code in bioql PyPI...
CVE-2023-24849
Information Disclosure in data Modem while parsing an FMTP line in an SDP message...
CVE-2019-10610
Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
CVE-2019-14012
Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking while processing SDP messages in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8905,...
CVE-2023-24849
Information Disclosure in data Modem while parsing an FMTP line in an SDP message...
Information disclosure
Information Disclosure in data Modem while parsing an FMTP line in an SDP message...
CVE-2023-24849 Buffer Over-read in Data Modem
Information Disclosure in data Modem while parsing an FMTP line in an SDP message...
PT-2023-19823 · Unknown · Data Modem
Name of the Vulnerable Software and Affected Versions: data Modem affected versions not specified Description: The issue is related to Information Disclosure in the data Modem while parsing an FMTP line in an SDP message. Recommendations: At the moment, there is no information about a newer versi...
Remote Code Execution (RCE)
sofia-sip is vulnerable to Remote Code Execution RCE. When parsing each line of a sdp message, rest = record + 2 will access the memory behind \0 and cause an out-of-bounds write. An attacker is able to send a message with evil sdp to FreeSWITCH, causing a crash or more serious consequence, such ...
CVE-2019-10610
Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
Buffer overflow
Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
CVE-2019-10610
Possible buffer over read when trying to process SDP message Video media line with frame-size attribute in video Media line in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
CVE-2019-10610
CVE-2019-10610 affects Qualcomm/Snapdragon video components where a buffer over-read can occur while parsing an SDP video media line with a frame-size attribute. Affected products include a wide range of Snapdragon Auto/Compute/IoT platforms (APQ/MDM/SC/SDM lines). The root cause is an over-read ...
CVE-2019-1676 Cisco Meeting Server SIP Processing Denial of Service Vulnerability
A vulnerability in the Session Initiation Protocol SIP call processing of Cisco Meeting Server CMS software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition of the Cisco Meeting Server. The vulnerability is due to insufficient validation of Session...
Asterisk 15.2.0 chan_pjsip SDP Media Format Denial Of Service Exploit
Asterisk running chanpjsip suffers from an SDP message related denial of service vulnerability. Versions affected include 13.10.0, 15.1.3, 15.1.4, 15.1.5, and 15.2.0. Segmentation fault occurs in Asterisk with an invalid SDP media format description - Authors: - Alfred Farrugia - Sandro Gauci -...
Cisco TelePresence Video Communication Server SIP DoS
According to the self-reported version returned by the remote device, it is affected by a vulnerability that could allow an unauthorized user to cause a denial of service via a specially crafted SDP message. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Code injection
The SIP module in Cisco TelePresence Video Communication Server VCS before 8.1 allows remote attackers to cause a denial of service process failure via a crafted SDP message, aka Bug ID CSCue97632...