nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows

Summary On Windows, converting a notebook containing SVG output to a PDF results in unauthorized code execution. Specifically, a third party can create a inkscape.bat file that defines a Windows batch script, capable of arbitrary code execution. When a user runs jupyter nbconvert --to pdf on a...

EUVD-2024-54146

Malicious code in bioql PyPI...

CVE-2024-12576

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU freezing graphics output...

CVE-2024-12576

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU freezing graphics output...

CVE-2024-12576

CVE-2024-12576 identifies a vulnerability in Imagination Technologies PowerVR-GPU components where software running as a non-privileged user can conduct improper GPU system calls. The root cause involves forcing MCU access to a non-aligned address , which triggers a crash of the firmware (FW) run...

CVE-2024-12576 GPU DDK - Untrusted app can crash firmware by forcing MCU access to non-aligned address

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU freezing graphics output...

PT-2025-10046

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue allows software installed and run as a non-privileged user to conduct improper GPU system calls, triggering a crash of the firmware running on the GPU. This results in the freezing o...

CVE-2024-12576: Untrusted Pointer Dereference

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU freezing graphics output...