PT-2025-37839

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26 tvOS versions prior to 26 visionOS versions prior to 26 watchOS versions prior to 26 macOS Tahoe versions prior to 26 iOS versions prior to 26 iPadOS versions prior to 26 Description The issue was addressed with...

Backdoor Attacks and Defenses in Computer Vision Domain: a Survey

Backdoor trojan attacks embed hidden, controllable behaviors into machine-learning models so that models behave normally on benign inputs but produce attacker-chosen outputs when a trigger is present. This survey reviews the rapidly growing literature on backdoor attacks and defenses in the...

[SECURITY] Fedora 42 Update: rocm-rpp-6.3.1-3.fc42

AMD ROCm Performance Primitives RPP library is a comprehensive, high-performance computer vision library for AMD processors that have HIP, OpenCL, or CPU backends...

Trend Vision One™ Email Security Raises the Standard

Learn all the new aspects of Trend Vision One™ Email Security and how it's raising the standard of effectiveness for the industry...

Trend Vision One Integrates Microsoft Defender for Endpoint

Discover how Trend Vision One integrates with Microsoft Defender for Endpoint to unify visibility, close security gaps, and accelerate risk mitigation - maximizing protection without replacing existing tools...

MoEcho: Exploiting Side-Channel Attacks to Compromise User Privacy in Mixture-Of-Experts LLMs

The transformer architecture has become a cornerstone of modern AI, fueling remarkable progress across applications in natural language processing, computer vision, and multimodal learning. As these models continue to scale explosively for performance, implementation efficiency remains a critical...

Benchmarking VPUs and GPUs for Media Workloads

...

Enhancing Targeted Adversarial Attacks on Large Vision-Language Models through Intermediate Projector Guidance

Targeted adversarial attacks are essential for proactively identifying security flaws in Vision-Language Models before real-world deployment. However, current methods perturb images to maximize global similarity with the target text or reference image at the encoder level, collapsing rich visual...

Amazon Linux 2 : webkitgtk4 (ALAS-2025-2970)

The version of webkitgtk4 installed on the remote host is prior to 2.48.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2970 advisory. A cookie management issue was addressed with improved state management. This issue is fixed in watchOS 11, macOS Sequo...

Linux Distros Unpatched Vulnerability : CVE-2018-7713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service assertion failure...

Vulnerability of operating systems visionOS, macOS, tvOS, iPadOS, iOS, iPadOS, macOS, related to data type mixing errors, allowing attackers to cause file corruption

The vulnerability of operating systems visionOS, macOS, tvOS, iPadOS, iOS, and iPadOS is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to cause file corruption...

The vulnerability of the Computer Vision component of Qualcomm’s embedded software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Computer Vision component of Qualcomm’s embedded software systems lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protect...

ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers

Ensemble-based attacks have been proven to be effective in enhancing adversarial transferability by aggregating the outputs of models with various architectures. However, existing research primarily focuses on refining ensemble weights or optimizing the ensemble path, overlooking the exploration ...

[SECURITY] Fedora 42 Update: mingw-opencv-4.10.0-6.fc42

MinGW Windows OpenCV library...

CVE-2025-54884

Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and below, the generateSecureId and getSecureRandomInt functions in security-kit versions prior to 3.5.0 packaged in Vision UI 1.4.0 and below are vulnerable to Denial of Service DoS...

CVE-2025-54883

Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and below, the getSecureRandomInt function in security-kit versions prior to 3.5.0 packaged in Vision-ui = 1.4.0 contains a critical cryptographic weakness. Due to a silent 32-bit...

CVE-2025-54883

Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and below, the getSecureRandomInt function in security-kit versions prior to 3.5.0 packaged in Vision-ui = 1.4.0 contains a critical cryptographic weakness. Due to a silent 32-bit...

CVE-2025-54884

Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and below, the generateSecureId and getSecureRandomInt functions in security-kit versions prior to 3.5.0 packaged in Vision UI 1.4.0 and below are vulnerable to Denial of Service DoS...

CVE-2025-54883: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and below, the getSecureRandomInt function in security-kit versions prior to 3.5.0 packaged in Vision-ui = 1.4.0 contains a critical cryptographic weakness. Due to a silent 32-bit...

Vision UI 安全漏洞

Vision UI is a UI component by David Osipov Personal Developer. A security vulnerability exists in Vision UI 1.4.0 and earlier versions, which stems from a memory exhaustion issue in the generateSecureId and getSecureRandomInt functions that could lead to a denial of service attack...