CVE-2022-2294

CVE-2022-2294 is a heap-buffer-overflow in WebRTC code within Google Chrome (Chromium-based) prior to 103.0.5060.114. Reported as enabling remote heap corruption via a crafted HTML page, potentially leading to code execution. Affected component: WebRTC in Chrome/Chromium. Remediation: upgrade to ...

CVE-2016-1976

CVE-2016-1976 is a use-after-free in the DesktopDisplayDevice class of Firefox WebRTC on Windows, allowing remote denial of service (and possibly other impacts) before Firefox 45.0. Vulnerable component: WebRTC implementation in Mozilla Firefox; root cause is use-after-free in DesktopDisplayDevic...

CVE-2016-1975

CVE-2016-1975 describes multiple race conditions in the WebRTC code path, specifically in dom/media/systemservices/CamerasChild.cpp, within Mozilla Firefox prior to 45.0 on Windows. The race conditions could allow remote attackers to trigger a denial of service via memory corruption or potentiall...

CVE-2021-28681

CVE-2021-28681 affects Pion WebRTC before 3.0.15. The vulnerability arises when a DTLS connection isn’t properly torn down after certificate verification fails; the PeerConnectionState is set to failed, but a user could continue to use the PeerConnection. Impact reported: data channel communicati...