CVE-2026-89826 drm/panthor: harden firmware build-info bounds checks

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: harden firmware build-info bounds checks panthorfwreadbuildinfo checks whether the metadata range fits in the firmware image with hdr.metastart + hdr.metasize. Both fields are u32, so the addition can wrap and let an...

EUVD-2024-21386

Malicious code in bioql PyPI...

PIB files Qualcomm unauthorized access

The vulnerability of PIB files in microprogramming software for embedded Qualcomm chips relates to the disclosure of confidential information through metadata in the Powerline Communication firmware. Exploiting this vulnerability can allow an unauthorized actor to gain unauthorized access to...

CVE-2024-23960

Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability. This vulnerability allows physically present attackers to bypass signature validation mechanism on affected installations of Alpine Halo9 devices. Authentication is not required to exploit this vulnerability. The specifi...

CVE-2024-23960 Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability

Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability. This vulnerability allows physically present attackers to bypass signature validation mechanism on affected installations of Alpine Halo9 devices. Authentication is not required to exploit this vulnerability. The specifi...

CVE-2024-23960

CVE-2024-23960 concerns Alpine Halo9 devices with an improper verification of the firmware metadata cryptographic signature. The flaw is in the firmware metadata signature validation mechanism and allows physically present attackers to bypass signature validation without authentication, potential...

CVE-2024-23960: Improper Verification of Cryptographic Signature

Alpine Halo9 Improper Verification of Cryptographic Signature Vulnerability. This vulnerability allows physically present attackers to bypass signature validation mechanism on affected installations of Alpine Halo9 devices. Authentication is not required to exploit this vulnerability. The specifi...