WeChat - Memory Corruption in CAudioJBM::InputAudioFrameToJBM Exploit

There is a memory corruption vulnerability in audio processing during a voice call in WeChat. When an RTP packet is processed, there is a call to UnpacketRTP. This function decrements the length of the packet by 12 without checking that the packet has at least 12 bytes in it. This leads to a...

WeChat - Memory Corruption in CAudioJBM::InputAudioFrameToJBM

There is a memory corruption vulnerability in audio processing during a voice call in WeChat. When an RTP packet is processed, there is a call to UnpacketRTP. This function decrements the length of the packet by 12 without checking that the packet has at least 12 bytes in it. This leads to a...

WeChat - Memory Corruption in CAudioJBM::InputAudioFrameToJBM

WeChat - Memory Corruption in CAudioJBM::InputAudioFrameToJBM There is a memory corruption vulnerability in audio processing during a voice call in WeChat. When an RTP packet is processed, there is a call to UnpacketRTP. This function decrements the length of the packet by 12 without checking tha...

CVE-2019-17151

This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User interaction is required to exploit this vulnerability in that the target must be within a chat session together with the attacker. The specific flaw...

Design/Logic Flaw

This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User interaction is required to exploit this vulnerability in that the target must be within a chat session together with the attacker. The specific flaw...

CVE-2019-17151

This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User interaction is required to exploit this vulnerability in that the target must be within a chat session together with the attacker. The specific flaw...

CVE-2019-17151

CVE-2019-17151 affects Tencent WeChat (before 7.0.9). The flaw is in parsing a user’s profile name, enabling unsafe redirection via the name field when the target is in a chat with the attacker. Exploitation requires user interaction within a chat session. The vulnerability is described as “name ...

XSS vulnerability in jeecms

jeecms is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with payment and financial settlement of the content of the e-commerce as one of the content...

Tencent WeChat Command Injection Vulnerability

Tencent WeChat is an online social application from the Chinese company Tencent. The program supports sending voice messages, videos, pictures, and text, among other things. A command injection vulnerability exists in Tencent WeChat that stems from the program failing to properly validate a...

Tencent WeChat name Field Unsafe Redirection Vulnerability

This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat. User interaction is required to exploit this vulnerability in that the target must be within a chat session together with the attacker. The specific flaw exists within th...

DLL Hijacking Vulnerability in WeChat PC Client

WeChat is a chatting and socializing software from Shenzhen Tencent Computer System Co. A DLL hijacking vulnerability exists in the WeChat PC client, which can be exploited by attackers to execute malicious code...

aeropress (=0.0.5), allennlp-datalawyer (>=0.1.0 <=0.1.10) +34 more potentially affected by CVE-2019-19274 via typed-ast (>=0.6.3 <=1.3.1)

typed-ast PYPI version =0.6.3, =0.1.0, =1.0.1, =1.0.17, =2.4.1, =0.1.1, =1.0.0, =2.2.2b1, =0.31.0, =1.3.5, =1.0.0, =0.3.4, =0.9.94, =2.0.3 - hmt-escrow =0.2.0rc1 and more Source cves: CVE-2019-19274 Source advisory: OSV:PYSEC-2019-130...

iOS URL Scheme Could Let App-in-the-Middle Attackers Hijack Your Accounts

Security researchers have illustrated a new app-in-the-middle attack that could allow a malicious app installed on your iOS device to steal sensitive information from other apps by exploiting certain implementations of Custom URL Scheme. By default on Apple's iOS operating system, every app runs...

WeChat for Android 7.0.4 - vcodec2_hls_filter Denial of Service

WeChat for Android 7.0.4 - vcodec2hlsfilter Denial of Service Exploit Title: DoS Wechat with an emoji Date: 16-May-2019 Exploit Author: Hong Nhat Pham Vendor Homepage: http://www.tencent.com/en-us/index.html Software Link: https://play.google.com/store/apps/details?id=com.tencent.mm Version: 7.0....

WeChat for Android 7.0.4 - vcodec2_hls_filter Denial of Service Exploit

Exploit Title: DoS Wechat with an emoji Exploit Author: Hong Nhat Pham Vendor Homepage: http://www.tencent.com/en-us/index.html Software Link: https://play.google.com/store/apps/details?id=com.tencent.mm Version: 7.0.4 Tested on: Android 9.0 CVE : CVE-2019-11419 Description: vcodec2hlsfilter in...

WeChat for Android 7.0.4 - 'vcodec2_hls_filter' Denial of Service

Exploit Title: DoS Wechat with an emoji Date: 16-May-2019 Exploit Author: Hong Nhat Pham Vendor Homepage: http://www.tencent.com/en-us/index.html Software Link: https://play.google.com/store/apps/details?id=com.tencent.mm Version: 7.0.4 Tested on: Android 9.0 CVE : CVE-2019-11419 Description:...

CVE-2019-11419

vcodec2hlsfilter in libvoipCodecv7a.so in the WeChat application through 7.0.3 for Android allows attackers to cause a denial of service application crash by replacing an emoji file under the /sdcard/tencent/MicroMsg directory with a crafted .wxgf file. The content of the replacement must be...

CVE-2019-11419

vcodec2hlsfilter in libvoipCodecv7a.so in the WeChat application through 7.0.3 for Android allows attackers to cause a denial of service application crash by replacing an emoji file under the /sdcard/tencent/MicroMsg directory with a crafted .wxgf file. The content of the replacement must be...

Design/Logic Flaw

vcodec2hlsfilter in libvoipCodecv7a.so in the WeChat application through 7.0.3 for Android allows attackers to cause a denial of service application crash by replacing an emoji file under the /sdcard/tencent/MicroMsg directory with a crafted .wxgf file. The content of the replacement must be...

CVE-2019-11419

Summary: CVE-2019-11419 affects WeChat for Android through 7.0.3/7.0.4 where vcodec2_hls_filter in libvoipCodec_v7a.so enables a local attacker to crash the application by replacing an emoji file (under /sdcard/tencent/MicroMsg) with a crafted .wxgf file whose content is derived from the device I...