Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token JWT from a co-located Worker in the production environment at up to 12 bits per second, 360 times the rate of an earlier attack demonstrated in 2021. The end-to-end...

EUVD-2021-7422

Malicious code in bioql PyPI...

EUVD-2025-16703

Malicious code in bioql PyPI...

CVE-2025-21486

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary...

CVE-2025-21486

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary...

CVE-2025-21486

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary...

CVE-2025-21486 Untrusted Pointer Dereference in DSP Service

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary...

CVE-2025-21486

CVE-2025-21486 describes a memory corruption in Qualcomm components during dynamic process creation when the client passes only the address and length of the shell binary. The CVSSv3.1 vector indicates local access, low attack complexity and privileges, no user interaction, with high impact to co...

CVE-2025-21486 Untrusted Pointer Dereference in DSP Service

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary...

PT-2025-23583 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption during dynamic process creation when a client passes only the address and length of a shell binary. Recommendations: At the moment, there is no informati...

CVE-2025-21486: Untrusted Pointer Dereference

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which stems from a dynamic process creation call that passes only the address and length of a shell binary file may result in memory corruption...

CVE-2021-35077

Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

Security Bulletin: WebSphere Dynamic Process Edition Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract Java™ API Documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS: CVEID: CVE-2013-1571 DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the...

CVE-2021-35077

Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

Design/Logic Flaw

Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35077

Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

PT-2022-10398 · Qualcomm · Snapdragon Connectivity +4

Name of the Vulnerable Software and Affected Versions: Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Mobile affected...

CVE-2021-35077: Use After Free

Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-1958

CVE-2021-1958 describes a race condition in the Qualcomm fastrpc kernel driver used for dynamic process creation, leading to a possible use-after-free in Snapdragon Auto, Connectivity, Mobile, and Wearables. The underlying issue is a race in the kernel driver that can compromise memory safety. Do...