149 matches found
Astra Linux – Vulnerability in ffmpeg
There is a heap-based Buffer Overflow vulnerability in FFmpeg 4.2, located in the file libavfilter/vfedgedetect.c within the gaussianblur module. This vulnerability may lead to memory corruption and other potential issues...
Jailbreaking Open-Weight LLMs Via Random Embedding Perturbations
While open-weight models have enjoyed steady progress in capabilities and wide adoption across multiple domains, their safety remains an important concern. One key feature is the ability to refuse or deflect harmful, malicious, or insensitive prompts. In this paper, we expose safety vulnerabiliti...
Information Blackhole: Exploring Backdoor Mechanism in 3D Point Cloud Reconstruction
Point cloud autoencoders are fundamental components for 3D world representation and support many safety-critical downstream applications. Existing studies have extensively investigated backdoor attacks on point cloud classification, whereas backdoor attacks against point cloud autoencoders remain...
SAGEGAN: Style-Based Anomaly Detection with Gaussian Embeddings Using Generative Adversarial Networks
Malware evolves faster than rule-based and signature-driven detection pipelines. This paper presents SAGEGAN, a benign-only trained malware anomaly detection framework that converts portable executable files into compact three-channel images and models benign structure through style-conditioned...
Astra Linux – Vulnerability in ffmpeg5
FFmpeg v.n6.1-3-g466799d4f5 allows a heap-based buffer overflow through the ffgaussianblur8 function in libavfilter/edgetemplate.c:116:5 component...
Astra Linux – Vulnerability in ffmpeg
There is a heap-based Buffer Overflow vulnerability in gaussianblur at libavfilter/vfedgedetect.c, which may lead to memory corruption and other potential issues...
Variational Probabilistic Quantization for Secret Key Generation
Secret key generation from correlated observations at Alice and Bob, in the presence of an eavesdropper Eve, underpins physical-layer security. Classical pipelines quantize by hand, amplify privacy afterwards, and optimize no objective tied to a key rate. We propose Variational Probabilistic...
Sub-Vacuum Jamming for Secure Communication
Artificial-noise jamming improves physical-layer security by degrading an eavesdropper's channel, but the injected noise also interferes with the legitimate receiver. We introduce a correlated-jamming protocol based on classical and quantum correlations that suppresses this self-interference whil...
A Multi-Model Hybrid Defense Approach against White-Box Adversarial Attacks in Computer Network Traffic
It is crucial to safeguard computer networks from evolving network security threats and unknown cyberattacks. An essential tool for protecting computer networks against unknown cyber threats is Network Intrusion Detection System NIDS. However, NIDS faces a major security concern due to its...
Traffic-Aware Randomized Smoothing for LLM-Based Network Intrusion Detection
Large language model LLM-based intrusion detection systems IDS are increasingly studied for security monitoring, yet their robustness against feasible traffic manipulation remains largely empirical. We present Traffic-Aware Randomized Smoothing TA-RS, a classifier-agnostic certified defense that...
Open Babel has out-of-bounds write in Gaussian translationVectors[]
SummaryA memory-safety vulnerability in Open Babel's Gaussian output parserallowed an out-of-bounds write into the translationVectors arraywhen reading a crafted input file. DetailsThe Gaussian reader stored periodic-cell translation vectors into afixed-size translationVectors array. A malformed...
PYSEC-2026-2783 Open Babel has out-of-bounds write in Gaussian translationVectors[]
Summary A memory-safety vulnerability in Open Babel's Gaussian output parser allowed an out-of-bounds write into the translationVectors array when reading a crafted input file. Details The Gaussian reader stored periodic-cell translation vectors into a fixed-size translationVectors array. A...
Open Babel has out-of-bounds write in Gaussian coords_type orientation parser
SummaryA memory-safety vulnerability in Open Babel's Gaussian output parserallowed an out-of-bounds write when reading a crafted input file. DetailsThe flaw was in the coordstype orientation parser inside theGaussian output reader. A malformed orientation block caused theparser to write past the...
PYSEC-2026-2793 Open Babel has out-of-bounds write in Gaussian coords_type orientation parser
Summary A memory-safety vulnerability in Open Babel's Gaussian output parser allowed an out-of-bounds write when reading a crafted input file. Details The flaw was in the coordstype orientation parser inside the Gaussian output reader. A malformed orientation block caused the parser to write past...
PT-2026-59432
Summary A memory-safety vulnerability in Open Babel's Gaussian output parser allowed an out-of-bounds write when reading a crafted input file. Details The flaw was in the coords type orientation parser inside the Gaussian output reader. A malformed orientation block caused the parser to write pas...
PT-2026-59422
Summary A memory-safety vulnerability in Open Babel's Gaussian output parser allowed an out-of-bounds write into the translationVectors array when reading a crafted input file. Details The Gaussian reader stored periodic-cell translation vectors into a fixed-size translationVectors array. A...
pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)
An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...
PYSEC-2026-909 pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)
An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...
F-ACVAE: A Federated Adaptive Conditional Variational Auto-Encoder for Privacy-Preserving Intrusion Detection in IoT Networks
The rapid proliferation of Internet of things IoT devices has significantly expanded the cyber-attack surface, necessitating robust and privacy-preserving intrusion detection systems IDS. However, centralized learning approaches often suffer from severe performance degradation due to...
