Webrtc Project Webrtc vulnerabilities

4 vulnerabilities

Known vulnerabilities in Webrtc Project Webrtc, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2021-28681github.com/pion/webrtcv3+1
EPSS score
0.68%
Pion WebRTC before 3.0.15 didn't properly tear down the DTLS Connection when certificate verification failed. The PeerConnectionState was set to failed, but a user could ignore that and continue to use the PeerConnection. )A WebRTC implementation shouldn't allow the user to continue if verification has failed.)6.8CVE-2016-1976mozillafirefox+1
EPSS score
1.34%
Use-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.6.8CVE-2016-1975mozillafirefox+1
EPSS score
1.16%
Multiple race conditions in dom/media/systemservices/CamerasChild.cpp in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.8.8CVE-2022-2294appleipados+20KEVRansomware
EPSS score
70.83%
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.