Chenyuan

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions through 6.7.1 **Description** The issue is related to a use-after-free in the `cec queue msg fh` function, which is associated with the files `cec-adap.c` and `cec-api.c` in the `drivers/media/cec/core` directory. This problem is also linked to the `rds recv track latency` function. The exploitation of this issue may allow an attacker to impact the confidentiality, integrity, and availability of protected information. **Recommendations** For Linux kernel versions through 6.7.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** MP3Gain version 1.6.2 **Description** A buffer over-read was discovered in the `ReadMP3APETag` function in `apetag.c`, which causes an application crash, leading to a remote denial of service. **Recommendations** For MP3Gain version 1.6.2, consider disabling the `ReadMP3APETag` function in `apetag.c` to prevent the buffer over-read until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libgxps versions prior to 0.3.1 **Description** The issue is related to a heap-based buffer over-read in the `ft font face hash` function of `gxps-fonts.c`. This can be triggered by a crafted input, potentially leading to a remote denial of service attack. **Recommendations** For versions prior to 0.3.1, update to version 0.3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the `ft font face hash` function until a patch is available.