MAL-2026-17885 Malicious code in proxyrubika (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dd55df978007c1a7548ff7e6a548553cf89bd536afffbc8b0921eb3efe31a342 The package contains code for automated files exfiltration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Malicious code in proxyrubika (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dd55df978007c1a7548ff7e6a548553cf89bd536afffbc8b0921eb3efe31a342 The package contains code for automated files exfiltration. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

CVE-2026-95179: Uncontrolled Recursion

An issue in lottie-android 6.7.1 and earlier and master allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer...

CVE-2026-95179

The lottie-android library (version 6.7.1 and earlier, including master ) is vulnerable to a Denial of Service (DoS) attack. A remote attacker can trigger this by providing a crafted Lottie animation JSON that contains a cyclic precomposition reference graph . This configuration leads to uncontro...

CVE-2026-95179

An issue in lottie-android 6.7.1 and earlier and master allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer...

EUVD-2026-102129

An issue in lottie-android 6.7.1 and earlier and master allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precomposition reference graph that triggers uncontrolled recursion in BaseLayer.forModel and CompositionLayer...

AI worms could spread across your smart devices, Anthropic warns

Your streaming box might not look like much of a computer. But connect enough inexpensive devices together, and they can run an AI model. Researchers at Anthropic demonstrated this by running a Google Gemma model across 15 off-brand Android TV boxes. They warn that small models could soon spread...

DEBIAN-CVE-2026-98397

In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown In gpiosecondaryfwnodeinit, acpibusfinddevicebyname returns a device reference, but the local dev variable is declared with freeputdevice,...

CVE-2026-98397

In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown In gpiosecondaryfwnodeinit, acpibusfinddevicebyname returns a device reference, but the local dev variable is declared with freeputdevice,...

CVE-2026-98397 platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown

In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown In gpiosecondaryfwnodeinit, acpibusfinddevicebyname returns a device reference, but the local dev variable is declared with freeputdevice,...

CVE-2026-98397

The Linux kernel contains a vulnerability in the platform/x86: x86-android-tablets driver. Specifically, in gpio_secondary_fwnode_init(), the acpi_bus_find_device_by_name() function returns a device reference that is dropped at the end of each iteration due to the __free(put_device) declaration. ...

EUVD-2026-101046

In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown In gpiosecondaryfwnodeinit, acpibusfinddevicebyname returns a device reference, but the local dev variable is declared with freeputdevice,...

CVE-2026-98397

In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown In gpiosecondaryfwnodeinit, acpibusfinddevicebyname returns a device reference, but the local dev variable is declared with freeputdevice,...

CVE-2026-98397 platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown

In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown In gpiosecondaryfwnodeinit, acpibusfinddevicebyname returns a device reference, but the local dev variable is declared with freeputdevice,...

Exploit for Use After Free in Linux Linux_Kernel

Samsung Root Kit — Offline Version Android App DF Chain Prefe...

Multiple Rakuten Mobile smartphones shipped with a known private test key for Android Verified Boot

Overview Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. Use of Weak Credentials CWE-1391 - CVE-2026-107153 Masayoshi Matsubara reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

CVE-2026-107153

Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...

CVE-2026-107153

Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...

CVE-2026-107153

Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...

EUVD-2026-100836

Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...