Linux Distros Unpatched Vulnerability : CVE-2015-2752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The XENDOMCTLmemorymapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough device, is not preemptible, which allows local x86 HVM domain user...

GHSA-769V-P64C-89PR PyTorch Model Files Can Bypass Pickle Scanners via Unexpected Pickle Extensions

CVE-2025-1889 Summary Picklescan fails to detect hidden pickle files embedded in PyTorch model archives due to its reliance on file extensions for detection. This allows an attacker to embed a secondary, malicious pickle file with a non-standard extension inside a model archive, which remains...

PyTorch Model Files Can Bypass Pickle Scanners via Unexpected Pickle Extensions

CVE-2025-1889 Summary Picklescan fails to detect hidden pickle files embedded in PyTorch model archives due to its reliance on file extensions for detection. This allows an attacker to embed a secondary, malicious pickle file with a non-standard extension inside a model archive, which remains...

CVE-2025-1889 picklescan - Security scanning bypass via non-standard file extensions

picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle and include a malicious pickle file with a non-standard file extension. Because the malicious pickle file inclusion is not...

Malicious code in linkedin-model (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1875 Malicious code in linkedin-model (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in iberia-model (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1841 Malicious code in iberia-model (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in google-model (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1825 Malicious code in google-model (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in coinbase-model (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1768 Malicious code in coinbase-model (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in apple-model (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1732 Malicious code in apple-model (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in airbnb-model (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1716 Malicious code in airbnb-model (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-43060

Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP...

CVE-2024-43061

Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive...

CVE-2024-43061 Use After Free in Audio

Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive...

CVE-2024-43061 Use After Free in Audio

Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive...