Malicious code in avalon-util-plugin (npm)

The package avalon-util-plugin was found to contain malicious code...

Malicious code in avalon-plugin-experimental-video (npm)

The package avalon-plugin-experimental-video was found to contain malicious code...

Malicious code in avalon-cli-console (npm)

The package avalon-cli-console was found to contain malicious code...

Malicious code in avalon-plugin-physics3d (npm)

The package avalon-plugin-physics3d was found to contain malicious code...

Malicious code in avalon-plugin-3d-extension (npm)

The package avalon-plugin-3d-extension was found to contain malicious code...

MAL-2025-15171 Malicious code in avalon-cli-prepare-ios (npm)

The package avalon-cli-prepare-ios was found to contain malicious code...

Malicious code in avalon-plugin-xmlhttprequest (npm)

The package avalon-plugin-xmlhttprequest was found to contain malicious code...

Malicious code in avalon-cli (npm)

The package avalon-cli was found to contain malicious code...

MAL-2025-15166 Malicious code in avalon-cli (npm)

The package avalon-cli was found to contain malicious code...

MAL-2025-15186 Malicious code in avalon-plugin-spine (npm)

The package avalon-plugin-spine was found to contain malicious code...

MAL-2025-15173 Malicious code in avalon-cli-server (npm)

The package avalon-cli-server was found to contain malicious code...

MAL-2025-15178 Malicious code in avalon-plugin-experimental-video (npm)

The package avalon-plugin-experimental-video was found to contain malicious code...

MAL-2025-15192 Malicious code in avalon-util-plugin (npm)

The package avalon-util-plugin was found to contain malicious code...

Malicious code in avalon-plugin-opengl (npm)

The package avalon-plugin-opengl was found to contain malicious code...

CVE-2023-22808

An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affects Bifrost r24p0 through r41p0 before r42p0, Valhall r24p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0...

CVE-2022-46394

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r39p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0...

CVE-2022-46781

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0...

CVE-2022-46396

An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0...

CVE-2022-36604

An access control issue in Canaan Avalon ASIC Miner 2020.3.30 and below allows unauthenticated attackers to arbitrarily change user passwords via a crafted POST request...

avalon-pockets.com Cross Site Scripting vulnerability OBB-3906208

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...