All CVEs — page 422 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw occurs when MoQSession::dataStreamReadLoop continues to use a stream handle after reading a FIN signal, causing a use-after-free condition in the WebTransport API. This allows a remote attacker to potentially trigger undefined behavior by sending a data stream with an unknown track alias and FIN flag.
The flaw is an unrestricted Server-Side Request Forgery (SSRF) vulnerability that allows authenticated users to send arbitrary HTTP/HTTPS requests, potentially leading to internal network scanning or cloud credential theft.
The flaw allows for OS command injection via the username argument in the smart_user tool, enabling arbitrary shell commands to be executed with the server's privileges.