PT-2024-8651 · Wowza · Wowza Streaming Engine

Name of the Vulnerable Software and Affected Versions: Wowza Streaming Engine versions prior to 4.9.1 Description: The issue is related to insufficient input validation in Wowza Streaming Engine, which can be exploited by a remote attacker to execute arbitrary code. An authenticated Streaming...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free when processing files in pddsimplifier.cpp. An attacker can cause segmentation faults or execute arbitrary code by triggering unexpected memory access. This occurs as the solver is trying to simplify the constraints, whic...