EUVD-2018-4523

Malware in sbrugna...

EUVD-2019-2028

Malware in sbrugna...

EUVD-2017-1552

Malware in sbrugna...

EUVD-2018-4525

Malware in sbrugna...

EUVD-2017-1551

Malware in sbrugna...

EUVD-2018-4524

Malware in sbrugna...

EUVD-2022-48049

Malicious code in bioql PyPI...

EUVD-2022-45960

Malicious code in bioql PyPI...

EUVD-2022-47577

Malicious code in bioql PyPI...

CVE-2022-42902

In Linaro Automated Validation Architecture LAVA before 2022.10, there is dynamic code execution in lavaserver/lavatable.py. Due to improper input sanitization, an anonymous user can force the lava-server-gunicorn service to execute user-provided code on the server...

CVE-2022-44641

In Linaro Automated Validation Architecture LAVA before 2022.11, users with valid credentials can submit crafted XMLRPC requests that cause a recursive XML entity expansion, leading to excessive use of memory on the server and a Denial of Service...

CVE-2022-45132

In Linaro Automated Validation Architecture LAVA before 2022.11.1, remote code execution can be achieved through user-submitted Jinja2 template. The REST API endpoint for validating device configuration files in lava-server loads input as a Jinja2 template in a way that can be used to trigger...

CVE-2019-25052

In Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call update and final cryptographic functions directly, causing a crash that could leak sensitive information...

CVE-2019-1010296

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in context of TEE core kernel. The component is: opteeos. The fixed version is: 3.4.0 and later...

CVE-2019-1010293

Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Boundary crossing. The impact is: Memory corruption of the TEE itself. The component is: opteeos. The fixed version is: 3.4.0 and later...

Linaro Trusted Firmware-M 安全漏洞

Linaro Trusted Firmware-M Tf-M is a reference implementation of the Platform Security Architecture Psa IoT security framework from Linaro, UK. A security vulnerability exists in Linaro Trusted Firmware-M version 2.1.0, which stems from not validating user-supplied pointers to invec and outvec...

Linaro Trusted Firmware-A Security Vulnerability

Linaro Trusted Firmware-A is an open source trusted firmware from Linaro. A security vulnerability exists in Linaro Trusted Firmware-A, which stems from a miscalculation issue that allows local code execution...

Linaro Trusted Firmware-A Digital Error Vulnerability

Linaro Trusted Firmware-A is an open source trusted firmware from Linaro. A security vulnerability exists in Linaro Trusted Firmware-A that stems from the presence of an integer overflow that could result in bypassing address restrictions and loading images to an address that is not allowed...

Linaro Trusted Firmware-A Security Vulnerability

Linaro Trusted Firmware-A is an open source trusted firmware from Linaro. A security vulnerability exists in Linaro Trusted Firmware-A versions prior to 2.10, which stems from an incorrectly formatted SDEI SMC that may cause a memory read to go out of bounds...

Linaro Trusted Firmware-A 缓冲区错误漏洞

Linaro Trusted Firmware-A is an open source trusted firmware from Linaro. A security vulnerability exists in Linaro Trusted Firmware-A version 2.8 and earlier, which stems from an out-of-bounds read in the X.509 parser that parses boot certificates, and which could be exploited by an attacker to...