CVE-2026-90554

A flaw was found in vLLM. This vulnerability allows a remote attacker to cause a denial of service by providing a specially crafted, highly compressed video as multimodal input when the NanoNemotronVL model is configured to use audio from video. The lack of proper size or duration limits during...

Malicious code in audio-extraction-pipeline (npm)

The package audio-extraction-pipeline was found to contain malicious code. --- Credit: OpenSSF source...

MAL-2025-15033 Malicious code in audio-extraction-pipeline (npm)

The package audio-extraction-pipeline was found to contain malicious code...

Malicious code in audio-extraction-pipeline (npm)

The package audio-extraction-pipeline was found to contain malicious code...

PT-2025-27362

Name of the Vulnerable Software and Affected Versions Airoha Bluetooth audio SDK affected versions not specified Description A permission bypass exists in the Bluetooth LE GATT service that allows unauthorized access to critical data of the RACE protocol. This issue stems from a lack of...

Qualcomm buffer error vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and from time to time manufactured on the surface of semiconductor wafers. Qualcomm has a security vulnerability that stems from a boundary...

‘Glowworm’ Attack Turns Light Flickers into Audio

Virtual meetings are vulnerable to a new, exotic attack called Glowworm, which measures an audio output device’s LED power light changes and converts them to audio reproductions — allowing cyberattackers to listen to sensitive conversations. As an increasing amount of business is being conducted...