#buffer-overflow

[ follow ]
#voip #cve-2026-2329 #grandstream #call-interception #remote-code-execution #android-security #dolby-dd-codec
#voip
fromSecurityWeek
7 hours ago
Information security

Critical Grandstream Phone Vulnerability Exposes Calls to Interception

A stack-based buffer overflow (CVE-2026-2329) in Grandstream GXP1600 phones enables unauthenticated remote root code execution, allowing call interception and credential extraction.
fromThe Hacker News
3 days ago
Information security

Grandstream GXP1600 VoIP Phones Exposed to Unauthenticated Remote Code Execution

Unauthenticated stack-based buffer overflow (CVE-2026-2329) in Grandstream GXP1600 VoIP phones' /cgi-bin/api.values.get allows remote root code execution via malicious request parameter.
more#voip
fromTechzine Global
1 month ago

Critical Dolby leak in Android patched by Google

CVE-2025-54957 is a buffer overflow vulnerability in Dolby UDC versions 4.5 to 4.13. The leak occurs when processing data within the evo_priv.c component of the DD+ bitstream decoder, reports security company Wiz. When processing this data, insufficient buffer space may be allocated. This insufficient allocation means that the out-of-bounds check is not performed correctly. This creates a buffer overflow, which can lead to data leakage.
Information security
[ Load more ]