PatchTheCVEwidevine vulnerabilities
Recent CVEs affecting widevine products. 6 tracked.
widevine has 6 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 6. Most recent: 2023-06-26. Highest priority: CVE-2022-48336 (score 61/100).
- CVE-2022-48336 CRITICAL 9.8 UPGRADE Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resul
- CVE-2022-48335 CRITICAL 9.8 UPGRADE Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer overflow and resu
- CVE-2022-48334 CRITICAL 9.8 UPGRADE Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys total_len+file_name_len integer ov
- CVE-2022-48333 CRITICAL 9.8 UPGRADE Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys prefix_len+feature_name_len intege
- CVE-2022-48332 CRITICAL 9.8 UPGRADE Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys file_name_len integer overflow and r
- CVE-2022-48331 CRITICAL 9.8 UPGRADE Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys feature_name_len integer overflow an
FAQ
How do I fix widevine vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is widevine being exploited right now?
None of the tracked widevine CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which widevine CVE should I patch first?
CVE-2022-48336 currently ranks highest (61/100): Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resul.