Linux Distros Unpatched Vulnerability : CVE-2023-53176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: 8250: Reinit port-pm on port specific driver unbind When we unbind a serial port hardware specific 8250 driver, the generic serial8250 driver takes over...

internalblue

This is an offensive tool for Bluetooth experimentation. It is a Bluetooth experimentation framework for Broadcom and Cypress chips, which enables various features that would otherwise only be possible with a full-stack software-defined radio implementation, such as injecting and monitoring packe...

CVE-2025-38516

In the Linux kernel, the following vulnerability has been resolved: pinctrl: qcom: msm: mark certain pins as invalid for interrupts On some platforms, the UFS-reset pin has no interrupt logic in TLMM but is nevertheless registered as a GPIO in the kernel. This enables the user-space to trigger a...

internalblue

This is an offensive tool for Bluetooth experimentation and patching firmware. It is a Bluetooth experimentation framework for Broadcom and Cypress chips, which enables various features that would otherwise only be possible with a full-stack software-defined radio implementation, such as injectin...

The vulnerability of microprogramming software in embedded Qualcomm chips, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of microprogramming software in embedded Qualcomm chips relates to the use of memory after it is freed. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

China Accuses Nvidia of Putting Backdoors into Their Chips

The government of China has accused Nvidia of inserting a backdoor into their H20 chips: China's cyber regulator on Thursday said it had held a meeting with Nvidia over what it called "serious security issues" with the company's artificial intelligence chips. It said US AI experts had "revealed...

Linux Distros Unpatched Vulnerability : CVE-2022-49965

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amd/pm: add missing -finixxxx interfaces for some SMU13 asics Without these, potential memory leak may be induced. CVE-2022-49965 Note that Nessus relies on...

The vulnerability of the Bluetooth driver’s firmware microprogramming software of MediaTek’s chips, which allows a hacker to cause a service failure.

The vulnerability of the Bluetooth driver’s firmware microprogramming software of MediaTek is related to the violation of the buffer’s initial boundary. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

UBUNTU-CVE-2025-38286

In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91gpioprobe doesn't check that given OF alias is not available or something went wrong when trying to get it. This might have consequences when accessing gpiochips array with...

CVE-2025-38286 pinctrl: at91: Fix possible out-of-boundary access

In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91gpioprobe doesn't check that given OF alias is not available or something went wrong when trying to get it. This might have consequences when accessing gpiochips array with...

Asrmicro ASR Series 安全漏洞

The Asrmicro ASR Series is a series of chips from Avantage Technology Asrmicro, a Chinese company. A security vulnerability exists in Asrmicro ASR Series, which originates from a resource leak that could lead to resource exposure...

PT-2025-27364

Name of the Vulnerable Software and Affected Versions Airoha Bluetooth audio SDK affected versions not specified Description A lack of authentication in the Custom Protocol of Airoha Technology Bluetooth chips allows unauthorized access to the RACE protocol. This flaw enables a remote attacker to...

PT-2025-25420 · Unknown · Kia-Branded Aftermarket Generic Smart Keyless Entry System

Name of the Vulnerable Software and Affected Versions: KIA-branded Aftermarket Generic Smart Keyless Entry System versions 2022 through 2025 Description: The issue is related to the use of fixed learning codes in the Key Fob Transmitter, which allows a replay attack. This affects KIA vehicles in...

The vulnerability of the Telnet protocol implementation in microcomputer-based Wi-Fi chips from Quantenna allows a intruder to gain unauthorized access to the device.

The vulnerability of the Telnet protocol implementation in Quantenna’s microprogrammable Wi-Fi chips lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the device...

CVE-2025-3461 ON Semiconductor Quantenna Telnet Missing Authentication

The Quantenna Wi-Fi chips ship with an unauthenticated telnet interface by default. This is an instance of CWE-306, "Missing Authentication for Critical Function," and is estimated as a CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. This issue affects Quantenna Wi-Fi chipset through versi...

CVE-2025-3461

The CVE-2025-3461 entry concerns Quantenna Wi‑Fi chipsets with an unauthenticated telnet interface enabled by default (CWE-306: Missing Authentication for Critical Function). Affected product: Quantenna Wi‑Fi chipset through SDK version 8.0.0.28. Reported impact: potential unauthorized access via...

The vulnerability of the Adreno GPU driver software’s microprogramming in Qualcomm embedded chips allows attackers to damage memory.

The vulnerability of the Adreno GPU driver in Qualcomm’s embedded chips relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to corrupt the memory...

The vulnerability of the graphics processor in microprogrammed software embedded in Qualcomm chips allows a hacker to cause memory corruption.

The vulnerability of the graphics processor in microprogrammed software embedded in Qualcomm’s integrated circuits is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker to cause memory corruption by sending a sequence of specially crafted...

CVE-2020-10369

Certain Cypress and Broadcom Wireless Combo chips, when a January 2021 firmware update is not present, allow inferences about memory content via a "Spectra" attack...

CVE-2019-10532

Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009,...