CVE-2022-48336

Widevine Trusted Application TA 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resultant buffer overflow...

PT-2023-3445 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 114.0.5735.198 Description: The issue is related to a use after free vulnerability in the Guest View component of Google Chrome, which can lead to heap corruption. An attacker who convinces a user to install a...

PT-2023-15710 · Google · Widevine Trusted Application

Name of the Vulnerable Software and Affected Versions: Widevine Trusted Application TA versions 5.0.0 through 5.1.1 Description: The issue is related to an integer overflow and resultant buffer overflow in the drm save keys feature, specifically with the feature name len. Recommendations: For...

CVE-2022-48331

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmsavekeys featurenamelen integer overflow and resultant buffer overflow...

Widevine 输入验证错误漏洞

Widevine is a proprietary digital rights management DRM system from Widevine, Inc. A security vulnerability exists in Widevine Trusted Application TA versions 5.0.0 through 5.1.1, which stems from an integer overflow in drmsavekeys featurenamelen...

PT-2023-15715 · Google · Widevine Trusted Application

Name of the Vulnerable Software and Affected Versions: Widevine Trusted Application TA versions 5.0.0 through 7.1.1 Description: The issue is related to an integer overflow and resultant buffer overflow in the PRDiagParseAndStoreData function. Recommendations: For versions 5.0.0 through 7.1.1,...

CVE-2022-48333

CVE-2022-48333 affects Widevine Trusted Application (TA) versions 5.0.0–5.1.1. The root cause is an integer overflow in the drm_verify_keys prefix_len+feature_name_len calculation, which can lead to a buffer overflow. The CVE entry documents a critical impact (high/remote attack surface) but does...

CVE-2022-48334

CVE-2022-48334 affects Widevine Trusted Application (TA) versions 5.0.0–5.1.1 . The root cause is an integer overflow in the drm_verify_keys calculation (total_len + file_name_len), which can lead to a buffer overflow . Documents state the vulnerability impact as high/critical (per CVSS from NVD)...

CVE-2022-48333

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmverifykeys prefixlen+featurenamelen integer overflow and resultant buffer overflow...

CVE-2022-48332

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmsavekeys filenamelen integer overflow and resultant buffer overflow...

CVE-2022-48333

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmverifykeys prefixlen+featurenamelen integer overflow and resultant buffer overflow...

CVE-2022-48336

The vulnerability CVE-2022-48336 affects the Widevine Trusted Application (TA) versions 5.0.0 through 7.1.1. The issue is an integer overflow in the PRDiagParseAndStoreData function, which leads to a buffer overflow. Connected sources confirm the affected component and the root cause, with no pub...

PT-2023-15714 · Google · Widevine Trusted Application

Name of the Vulnerable Software and Affected Versions: Widevine Trusted Application TA versions 5.0.0 through 7.1.1 Description: The issue is related to an integer overflow and resultant buffer overflow in the PRDiagVerifyProvisioning function. Recommendations: For versions 5.0.0 through 7.1.1,...

CVE-2022-48332

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmsavekeys filenamelen integer overflow and resultant buffer overflow...

Widevine 输入验证错误漏洞

Widevine is a proprietary digital rights management DRM system from Widevine, Inc. A security vulnerability exists in Widevine Trusted Application TA versions 5.0.0 through 7.1.1 that stems from an integer overflow in PRDiagParseAndStoreData...

CVE-2022-48334

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmverifykeys totallen+filenamelen integer overflow and resultant buffer overflow...

PT-2023-15713 · Google · Widevine Trusted Application

Name of the Vulnerable Software and Affected Versions: Widevine Trusted Application TA versions 5.0.0 through 5.1.1 Description: The issue is related to an integer overflow and resultant buffer overflow in the drm verify keys function, specifically with the total len+file name len calculation. Th...

CVE-2022-48332

CVE-2022-48332 affects Widevine Trusted Application (TA) versions 5.0.0 through 5.1.1. The issue is a drm_save_keys file_name_len integer overflow that leads to a buffer overflow, with CVSSv3.1 base metrics indicating CRITICAL impact (Network, No user interaction, Privileges NONE, Scope UNCHANGED...

Code injection

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 21.0.0 until 21.0.9.12, 22.0.0 until 22.2.10.12, 23.0.0 until...

CVE-2023-35927 Nextcloud system addressbooks can be modified by malicious trusted server

NextCloud Server and NextCloud Enterprise Server provide file storage for Nextcloud, a self-hosted productivity platform. In NextCloud Server versions 25.0.0 until 25.0.7 and 26.0.0 until 26.0.2 and Nextcloud Enterprise Server versions 21.0.0 until 21.0.9.12, 22.0.0 until 22.2.10.12, 23.0.0 until...