206 matches found
EUVD-2025-20409
Malicious code in bioql PyPI...
EUVD-2022-55443
Malicious code in bioql PyPI...
EUVD-2023-37300
Malicious code in bioql PyPI...
EUVD-2023-37258
Malicious code in bioql PyPI...
EUVD-2023-2012
Malicious code in bioql PyPI...
CVE-2025-27030
information disclosure while invoking calibration data from user space to update firmware size...
CVE-2025-27030
information disclosure while invoking calibration data from user space to update firmware size...
CVE-2025-27030
CVE-2025-27030 is described as an information disclosure in Qualcomm audio components, tied to Pixel Watch security bulletin coverage. The connected Pixel Watch bulletin lists this CVE under the Qualcomm components table with the vulnerability type as Audio and notes a patch level requirement of ...
CVE-2025-27030 Buffer Over-read in Audio
information disclosure while invoking calibration data from user space to update firmware size...
CVE-2025-27030 Buffer Over-read in Audio
information disclosure while invoking calibration data from user space to update firmware size...
PT-2025-39271
Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description An information disclosure issue exists when invoking calibration data from user space to update firmware size. The issue allows for the disclosure of information. Recommendatio...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a series of chipsets from Qualcomm, an American company. A security vulnerability exists in Qualcomm Chipsets that stems from a potential information leak when calibration data is called from user space to update firmware size...
CVE-2025-39696
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: tas2781: Fix wrong reference of tasdevicepriv During the conversion to unify the calibration data management, the reference to tasdevicepriv was wrongly set to h-hdapriv instead of h-priv. This resulted in memory...
UBUNTU-CVE-2025-39696
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: tas2781: Fix wrong reference of tasdevicepriv During the conversion to unify the calibration data management, the reference to tasdevicepriv was wrongly set to h-hdapriv instead of h-priv. This resulted in memory...
CVE-2025-39696 ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: tas2781: Fix wrong reference of tasdevicepriv During the conversion to unify the calibration data management, the reference to tasdevicepriv was wrongly set to h-hdapriv instead of h-priv. This resulted in memory...
PT-2025-36290
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to the ALSA subsystem and the tas2781 driver. A wrong reference to tasdevice priv was set to h-hda priv instead of h-priv during calibration...
CVE-2025-24002
An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporary denial-of-service for these stations until they got restarted by the watchdog...
Unifying Re-Identification, Attribute Inference, and Data Reconstruction Risks in Differential Privacy
Differentially private DP mechanisms are difficult to interpret and calibrate because existing methods for mapping standard privacy parameters to concrete privacy risks -- re-identification, attribute inference, and data reconstruction -- are both overly pessimistic and inconsistent. In this work...
CVE-2025-24003
An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting in a loss of integrity for only EichrechtAgents and potential denial-of-service for these stations...
CVE-2025-24002
An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporary denial-of-service for these stations until they got restarted by the watchdog...