Published:2026/11/09 Last Updated:2026/11/09
JVNVU#93403064
Webtop Media Transcoder vulnerable to incorrect resource transfer between spheres
Critical
Overview
Webtop Media Transcoder provided by Openwave Messaging (Ireland) Limited contains an incorrect resource transfer between spheres vulnerability.
Products Affected
- Webtop Media Transcoder versions prior to 1.1.22.0
Description
Webtop Media Transcoder provided by Openwave Messaging (Ireland) Limited contains the following vulnerability.
- Incorrect Resource Transfer Between Spheres (CWE-669)
Impact
If an authenticated attacker uploads a specially crafted file by following specific steps, sensitive information may be obtained.
Solution
Apply the Patch
Apply the patch according to the information provided by the developer.
Contact the developer for the details.
Vendor Status
| Vendor | Link |
| Openwave Messaging (Ireland) Limited | Openwave Messaging (Ireland) Ltd - Public Security Advisory |
References
JPCERT/CC Addendum
Vulnerability Analysis by JPCERT/CC
Credit
Openwave Messaging (Ireland) Limited reported this vulnerability to JPCERT/CC to notify users of its solution through JVN.