CVE-2026-90554

A flaw was found in vLLM. This vulnerability allows a remote attacker to cause a denial of service by providing a specially crafted, highly compressed video as multimodal input when the NanoNemotronVL model is configured to use audio from video. The lack of proper size or duration limits during...

MAL-2025-15033 Malicious code in audio-extraction-pipeline (npm)

The package audio-extraction-pipeline was found to contain malicious code...

Malicious code in audio-extraction-pipeline (npm)

The package audio-extraction-pipeline was found to contain malicious code...

PT-2025-27362

Name of the Vulnerable Software and Affected Versions Airoha Bluetooth audio SDK affected versions not specified Description A permission bypass exists in the Bluetooth LE GATT service that allows unauthorized access to critical data of the RACE protocol. This issue stems from a lack of...

Qualcomm 缓冲区错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and from time to time manufactured on the surface of semiconductor wafers. Qualcomm has a security vulnerability that stems from a boundary...

‘Glowworm’ Attack Turns Light Flickers into Audio

Virtual meetings are vulnerable to a new, exotic attack called Glowworm, which measures an audio output device’s LED power light changes and converts them to audio reproductions — allowing cyberattackers to listen to sensitive conversations. As an increasing amount of business is being conducted...