CVE-2021-0449

In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-0455: Out-of-bounds Write

In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-0450: Improper Initialization

In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-0452: Improper Initialization

In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-0456: Out-of-bounds Write

In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-0454: Out-of-bounds Write

In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-0449: Improper Initialization

In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-0451: Improper Initialization

In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-0453: Improper Initialization

In the Titan-M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

Newest Intel Side-Channel Attack Sniffs Out Sensitive Data

Intel processors are vulnerable to a new side-channel attack, which researchers said can allow attackers to steal sensitive information such as encryption keys or passwords. Unlike previous side-channel attacks, this attack does not rely on sharing memory, cache sets and other former tactics...

MediaTek vow Competitive Conditions Issue Vulnerability

MediaTek vow is an application chip from MediaTek, China. It provides optimized platform size and power consumption. MediaTek vow suffers from a Competitive Condition Issue vulnerability that originates from a memory corruption due to a competitive condition, which can be exploited by an attacker...

Mysterious Macintosh Malware

This is weird: Once an hour, infected Macs check a control server to see if there are any new commands the malware should run or binaries to execute. So far, however, researchers have yet to observe delivery of any payload on any of the infected 30,000 machines, leaving the malwares ultimate goal...

PT-2021-2481

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds write due to a missing bounds check in the Citadel chip firmware. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2021-2464

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to the Titan M chip firmware, where uninitialized data can lead to the disclosure of stack memory. This could result in local information disclosure, requiring System execution privileges for...

PT-2021-2479

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write in the Citadel chip firmware due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User...

PT-2021-2480

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write in the Citadel chip firmware due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User...

PT-2021-2470

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to the Titan M chip firmware, where uninitialized data can lead to the disclosure of stack memory. This could result in local information disclosure, requiring System execution privileges for...

System-on-a-Chip Driver Privilege Escalation

The vulnerability of the System-on-a-Chip Driver for Intel Compute Stick STK1A32SC is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

Hackers Targeting Apple’s M1 Chip with Mac Malware

By Waqas Ex-NSA researcher has discovered malware that is equipped with anti-analysis capabilities and designed to specifically target Apple's new chip. This is a post from HackRead.com Read the original post: Hackers Targeting Apples M1 Chip with Mac Malware...

Shining a Light on SolarCity: Practical Exploitation of the X2e IoT Device (Part One)

In 2019, Mandiant’s Red Team discovered a series of vulnerabilities present within Digi International’s ConnectPort X2e device, which allows for remote code execution as a privileged user. Specifically, Mandiant’s research focused on SolarCity’s now owned by Tesla rebranded ConnectPort X2e device...