Oddmund Skogen

Improper input validation within an internal service allows an attacker with local access to escalate privileges to root. This requires the attacker to already be capable of running arbitrary code on a node, either through a separate remote code execution flaw or by possessing administrative access to the operating system.

Improper input validation in the media implementation allows a remote attacker to trigger a software abort, leading to a denial of service.

Improper input validation in the media implementation allows a remote attacker to trigger memory corruption or a software abort, leading to a denial of service. This occurs when a crafted media stream is processed, which may result in a controlled abort or potential memory corruption.

Improper input validation on Pexip Infinity Conferencing Nodes allows an unauthenticated remote attacker to execute arbitrary code as an unprivileged user.

A flaw exists that could lead to a denial-of-service (DoS) condition. This occurs when the software renders a Scalable Vector Graphics (SVG) file containing a `<pattern>` element, potentially resulting in recursive rendering and a stack overflow.

The issue is a use-after-free condition within the Qt framework, specifically related to the parsing of SVG files. The `renderPattern()` function and the SVG module are affected. The vulnerability occurs when a node is deleted after creation but is subsequently accessed, leading to a use-after-free scenario. This could allow an attacker to execute arbitrary code or cause a denial of service. The vulnerability impacts applications utilizing the Qt SVG module.