CVAT.ai CVAT security vulnerability

CVAT.ai CVAT is an open source data processing tool from CVAT.ai. A security vulnerability exists in CVAT.ai CVAT versions 2.8.1 through 2.52.0 that originates from an attacker being able to retrieve the contents of any file system directory accessible by the CVAT server, potentially leading to a...

Exploring the Effect of DNN Depth on Adversarial Attacks in Network Intrusion Detection Systems

Adversarial attacks pose significant challenges to Machine Learning ML systems and especially Deep Neural Networks DNNs by subtly manipulating inputs to induce incorrect predictions. This paper investigates whether increasing the layer depth of deep neural networks affects their robustness agains...

CVE-2025-27039

Memory corruption may occur while processing IOCTL calls for DMM/WARPNCC CONFIG in Qualcomm chipsets. Affected component: DMM/WARPNCC IOCTL handling. Root cause: memory corruption leading to potential instability (no explicit exploit details). CVE notes MEDIUM severity (AV:L/AC:L/PR:L/UI:N/S:U/C:...

EUVD-2020-3534

Malware in sbrugna...

EUVD-2024-36474

Malicious code in bioql PyPI...

EUVD-2024-42258

Malicious code in bioql PyPI...

EUVD-2022-36324

Malicious code in bioql PyPI...

EUVD-2024-42257

Malicious code in bioql PyPI...

EUVD-2025-3093

Malicious code in bioql PyPI...

EUVD-2024-42295

Malicious code in bioql PyPI...

EUVD-2024-41455

Malicious code in bioql PyPI...

CVE-2025-21476 Buffer Copy Without Checking Size of Input in Computer Vision

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...

CVE-2025-21476

CVE-2025-21476 concerns memory corruption when passing parameters to the Trusted Virtual Machine during the handshake on Qualcomm chipsets. The vulnerability is characterized by a Local attack with Low complexity, Low privileges required, no user interaction, and a high impact on Confidentiality,...

CVE-2025-21476 Buffer Copy Without Checking Size of Input in Computer Vision

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...

Backdoor Attacks and Defenses in Computer Vision Domain: a Survey

Backdoor trojan attacks embed hidden, controllable behaviors into machine-learning models so that models behave normally on benign inputs but produce attacker-chosen outputs when a trigger is present. This survey reviews the rapidly growing literature on backdoor attacks and defenses in the...

[SECURITY] Fedora 42 Update: rocm-rpp-6.3.1-3.fc42

AMD ROCm Performance Primitives RPP library is a comprehensive, high-performance computer vision library for AMD processors that have HIP, OpenCL, or CPU backends...

Linux Distros Unpatched Vulnerability : CVE-2018-7713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service assertion failure...

Qualcomm Computer Vision Data Compromise

The vulnerability of the Computer Vision component of Qualcomm’s embedded software systems lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protect...

[SECURITY] Fedora 42 Update: mingw-opencv-4.10.0-6.fc42

MinGW Windows OpenCV library...

PT-2025-31394 · Cvat · Cvat

Name of the Vulnerable Software and Affected Versions: CVAT versions 1.1.0 through 2.41.0 Description: CVAT is an open source interactive video and image annotation tool for computer vision. Email verification was not enforced when using Basic HTTP Authentication in versions 1.1.0 through 2.41.0,...