CVE-2023-20701

In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07643270; Issue ID: ALPS07643270...

CVE-2023-20634

In widevine, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07635697; Issue ID: ALPS07635697...

CVE-2022-32597

In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446228; Issue ID: ALPS07446228...

CVE-2022-48335

Widevine Trusted Application TA 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer overflow and resultant buffer overflow...

CVE-2022-48331

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmsavekeys featurenamelen integer overflow and resultant buffer overflow...

CVE-2022-48336

Widevine Trusted Application TA 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resultant buffer overflow...

CVE-2022-48333

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmverifykeys prefixlen+featurenamelen integer overflow and resultant buffer overflow...

CVE-2022-48334

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmverifykeys totallen+filenamelen integer overflow and resultant buffer overflow...

CVE-2022-48332

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmsavekeys filenamelen integer overflow and resultant buffer overflow...

CVE-2022-32595

In widevine, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446236; Issue ID: ALPS07446236...

CVE-2022-32596

In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446213; Issue ID: ALPS07446213...

CVE-2022-32598

In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446228; Issue ID: ALPS07446228...

CVE-2022-32594

In widevine, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07446207; Issue ID: ALPS07446207...

CVE-2021-25476

An information disclosure vulnerability in Widevine TA log prior to SMR Oct-2021 Release 1 allows attackers to bypass the ASLR protection mechanism in TEE...

CVE-2021-25469

A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows arbitrary code execution...

CVE-2021-25468

A possible guessing and confirming a byte memory vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows attackers to read arbitrary memory address...

CVE-2020-11293

Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon...

CVE-2019-14123

Possible buffer overflow and over read possible due to missing bounds checks for fixed limits if we consider widevine HLOS client as non-trustable in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kamorta, QCS404, Rennell, SC7180, SDX55,...

Minor update (2) for Vivaldi Desktop Browser 7.2

Download Vivaldi The following improvements were made since the first 7.2 minor update: Chromium Update to 134.0.6998.182 CVE-2025-2783 Crash Sending Tab VB-113521 Currency Widget The currency widget convert Japanese Yen and Chinese Yuan wrong VB-115291 LinuxMedia Not prompted to restart due to...

CVE-2024-43051

Information disclosure while deriving keys for a session for any Widevine use case...