CVE-2022-48336

Widevine Trusted Application TA 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resultant buffer overflow...

Widevine 输入验证错误漏洞

Widevine is a proprietary digital rights management DRM system from Widevine, Inc. A security vulnerability exists in Widevine Trusted Application TA versions 5.0.0 through 5.1.1, which stems from an integer overflow in drmverifykeys prefixlen+featurenamelen...

PT-2023-15712 · Google · Widevine Trusted Application

Name of the Vulnerable Software and Affected Versions: Widevine Trusted Application TA versions 5.0.0 through 5.1.1 Description: The issue is related to an integer overflow and resultant buffer overflow in the drm verify keys function, specifically with the prefix len+feature name len calculation...

Widevine 输入验证错误漏洞

Widevine is a proprietary digital rights management DRM system from Widevine, Inc. A security vulnerability exists in Widevine Trusted Application TA versions 5.0.0 through 5.1.1, which stems from an integer overflow in drmsavekeys featurenamelen...

CVE-2022-48333

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmverifykeys prefixlen+featurenamelen integer overflow and resultant buffer overflow...

CVE-2022-48334

CVE-2022-48334 affects Widevine Trusted Application (TA) versions 5.0.0–5.1.1 . The root cause is an integer overflow in the drm_verify_keys calculation (total_len + file_name_len), which can lead to a buffer overflow . Documents state the vulnerability impact as high/critical (per CVSS from NVD)...

PT-2023-15715 · Google · Widevine Trusted Application

Name of the Vulnerable Software and Affected Versions: Widevine Trusted Application TA versions 5.0.0 through 7.1.1 Description: The issue is related to an integer overflow and resultant buffer overflow in the PRDiagParseAndStoreData function. Recommendations: For versions 5.0.0 through 7.1.1,...

CVE-2022-48333

CVE-2022-48333 affects Widevine Trusted Application (TA) versions 5.0.0–5.1.1. The root cause is an integer overflow in the drm_verify_keys prefix_len+feature_name_len calculation, which can lead to a buffer overflow. The CVE entry documents a critical impact (high/remote attack surface) but does...

CVE-2022-48331

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmsavekeys featurenamelen integer overflow and resultant buffer overflow...

CVE-2022-48332

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmsavekeys filenamelen integer overflow and resultant buffer overflow...

CVE-2022-48334

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmverifykeys totallen+filenamelen integer overflow and resultant buffer overflow...

PT-2023-15713 · Google · Widevine Trusted Application

Name of the Vulnerable Software and Affected Versions: Widevine Trusted Application TA versions 5.0.0 through 5.1.1 Description: The issue is related to an integer overflow and resultant buffer overflow in the drm verify keys function, specifically with the total len+file name len calculation. Th...

PT-2023-15714 · Google · Widevine Trusted Application

Name of the Vulnerable Software and Affected Versions: Widevine Trusted Application TA versions 5.0.0 through 7.1.1 Description: The issue is related to an integer overflow and resultant buffer overflow in the PRDiagVerifyProvisioning function. Recommendations: For versions 5.0.0 through 7.1.1,...

CVE-2022-48333

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmverifykeys prefixlen+featurenamelen integer overflow and resultant buffer overflow...

CVE-2022-48332

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmsavekeys filenamelen integer overflow and resultant buffer overflow...

Widevine 输入验证错误漏洞

Widevine is a proprietary digital rights management DRM system from Widevine, Inc. A security vulnerability exists in Widevine Trusted Application TA versions 5.0.0 through 7.1.1 that stems from an integer overflow in PRDiagParseAndStoreData...

CVE-2022-48332

CVE-2022-48332 affects Widevine Trusted Application (TA) versions 5.0.0 through 5.1.1. The issue is a drm_save_keys file_name_len integer overflow that leads to a buffer overflow, with CVSSv3.1 base metrics indicating CRITICAL impact (Network, No user interaction, Privileges NONE, Scope UNCHANGED...

CVE-2022-48336

The vulnerability CVE-2022-48336 affects the Widevine Trusted Application (TA) versions 5.0.0 through 7.1.1. The issue is an integer overflow in the PRDiagParseAndStoreData function, which leads to a buffer overflow. Connected sources confirm the affected component and the root cause, with no pub...

Widevine 输入验证错误漏洞

Widevine is a proprietary digital rights management DRM system from Widevine, Inc. An input validation error vulnerability exists in Widevine Trusted Application versions 5.0.0 through 5.1.1, which stems from the presence of an integer overflow issue that results in a buffer overflow...

CVE-2022-48478

The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerability may cause exceptions of the facial recognition service...