CVE-2024-41624

Incorrect access control in Himalaya Xiaoya nano smart speaker romversion 1.6.96 allows a remote attacker to have an unspecified impact...

PT-2024-29469 · Himalaya · Himalaya Xiaoya Nano Smart Speaker

Name of the Vulnerable Software and Affected Versions: Himalaya Xiaoya nano smart speaker version 1.6.96 Description: The issue is related to incorrect access control, allowing a remote attacker to have an unspecified impact. Recommendations: For version 1.6.96, at the moment, there is no...

CVE-2024-41624

The CVE-2024-41624 entry concerns Himalaya Xiaoya nano smart speaker ROM version 1.6.96 with an issue described as incorrect access control. Across connected sources, the affected component is the device firmware/ROM and the vulnerability is an access-control weakness that could allow a remote at...

Himalaya Xiaoya nano smart speaker 安全漏洞

Himalaya Xiaoya nano smart speaker is a smart speaker from the Chinese company Himalaya Himalaya. A security vulnerability exists in Himalaya Xiaoya nano smart speaker version 1.6.96, which stems from an incorrect privilege modification...

CVE-2024-41624

Incorrect access control in Himalaya Xiaoya nano smart speaker romversion 1.6.96 allows a remote attacker to have an unspecified impact...

Denial Of Service

speaker is vulnerable to Denial of Service DoS. The vulnerability is due to unexpected input types provided to the channels property of the Speaker object, which can trigger an assert macro and potentially crash the process...

3abn (>=1.0.0, <=2.1.11), @2003scape/rsc-sounds (>=1.0.0, <=1.0.1) +380 more potentially affected by CVE-2024-21526 via speaker (>=0.0.10, <=0.5.5)

speaker NPM version =0.0.10, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.5 and more Source cves: CVE-2024-21526 Source advisory: OSV:GHSA-W5FC-GJ3H-26RX...

GHSA-W5FC-GJ3H-26RX speaker vulnerable to Denial of Service

All versions of the package speaker are vulnerable to Denial of Service DoS when providing unexpected input types to the channels property of the Speaker object makes it possible to reach an assert macro. Exploiting this vulnerability can lead to a process crash...

speaker vulnerable to Denial of Service

All versions of the package speaker are vulnerable to Denial of Service DoS when providing unexpected input types to the channels property of the Speaker object makes it possible to reach an assert macro. Exploiting this vulnerability can lead to a process crash...

CVE-2024-21526

All versions of the package speaker are vulnerable to Denial of Service DoS when providing unexpected input types to the channels property of the Speaker object makes it possible to reach an assert macro. Exploiting this vulnerability can lead to a process crash...

CVE-2024-21526

All versions of the package speaker are vulnerable to Denial of Service DoS when providing unexpected input types to the channels property of the Speaker object makes it possible to reach an assert macro. Exploiting this vulnerability can lead to a process crash...

CVE-2024-21526

CVE-2024-21526 affects the Node.js package speaker (node-speaker). The vulnerability originates from providing unexpected input types to the channels property of the Speaker object, which can reach an internal assert macro and cause a process crash. Documents in multiple sources confirm DoS via t...

CVE-2024-21526

All versions of the package speaker are vulnerable to Denial of Service DoS when providing unexpected input types to the channels property of the Speaker object makes it possible to reach an assert macro. Exploiting this vulnerability can lead to a process crash...

PT-2024-18940 · Speaker · Speaker

Name of the Vulnerable Software and Affected Versions: speaker affected versions not specified Description: The issue is related to a Denial of Service DoS condition that can occur when the channels property of the Speaker object receives unexpected input types, leading to an assert macro being...

node-speaker Security Vulnerabilities

node-speaker is a writable stream instance by Nathan Rajlich Personal Developer. It is used to receive PCM audio data and output it to a speaker. A security vulnerability exists in node-speaker that stems from vulnerability to Denial of Service DoS attacks that can cause the process to crash when...

SUSE CVE-2022-48717

In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speakergaincontrolput Check for negative values of "priv-gain" to prevent an out of bounds access. The concern is that these might come from the user via: - sndctlelemwriteuser - sndctlelemwrite -...

CVE-2022-48717

In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speakergaincontrolput Check for negative values of "priv-gain" to prevent an out of bounds access. The concern is that these might come from the user via: - sndctlelemwriteuser - sndctlelemwrite -...

CVE-2022-48717

In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speakergaincontrolput Check for negative values of "priv-gain" to prevent an out of bounds access. The concern is that these might come from the user via: - sndctlelemwriteuser - sndctlelemwrite -...

CVE-2022-48717 ASoC: max9759: fix underflow in speaker_gain_control_put()

In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speakergaincontrolput Check for negative values of "priv-gain" to prevent an out of bounds access. The concern is that these might come from the user via: - sndctlelemwriteuser - sndctlelemwrite -...

CVE-2022-48717 ASoC: max9759: fix underflow in speaker_gain_control_put()

In the Linux kernel, the following vulnerability has been resolved: ASoC: max9759: fix underflow in speakergaincontrolput Check for negative values of "priv-gain" to prevent an out of bounds access. The concern is that these might come from the user via: - sndctlelemwriteuser - sndctlelemwrite -...