262 matches found
CVE-2026-38838
CVE-2026-38838 Akai MPC Sample: Path Traversal in Built-in Web Server Summary Field| Value ---|--- CVE ID| CVE-2026-38838 Vendor| Akai Professional / inMusic Brands Product| Akai MPC Sample Affected versions| Confirmed in firmware v1.2.1.2 and v1.3.0.12 latest at time of testing; intermediate...
reverie
Reverie An efficient implementation of the NIZKPoK outlined in KKW 2018 Reverie is an implementation prover and verifier of the MPC-in-the-head NIZKPoK outlined in Improved Non-Interactive Zero Knowledge with Applications to Post-Quantum Signatures. Reverie seeks to offer concrete prover efficien...
PT-2026-128119
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null dereference occurs in the mpc validate xid function. When a peer XID is NULL or a read/write channel pairing mismatch occurs, the grp-saved xid2 variable is not initialized...
PT-2026-125556
Name of the Vulnerable Software and Affected Versions mpc-lib affected versions not specified Description A cryptographic implementation flaw in the mpc-lib library used in the MPC-based custody pipeline breaks the security guarantee of BIP32 hardened derivation. The issue occurs because the...
Retraction of mpc-lib hardened derivation fails to protect ancestor isolation
Overview Fireblocks' mpc-lib library contains a cryptographic fail-open vulnerability in its BIP32 hardened derivation implementation in the case of a missing private parent key. This breaks the ancestor isolation property of hardened derivation, allowing an attacker with a compromised lower-leve...
Interflow: Breaking the Offline-Online Barrier for Private AI at the Edge
Privacy-preserving machine learning PPML offers a promising path toward bringing powerful AI services to the edge without exposing sensitive user data. However, its practical deployment remains constrained by the high communication, computation, and data-movement costs of secure multi-party...
Akai MPC Sample 1.3.0.12 Path Traversal
Akai MPC Sample version 1.3.0.12 contains a path traversal vulnerability in its built-in web server that allows unauthenticated file reads outside the webroot through the USB-C virtual Ethernet interface. https://packetstorm.news/download/236153...
Think Locally Before Computing Jointly: Efficient Secure Multi-Party Computation Via Maximizing Local Processing
Secure multi-party computation MPC lets parties evaluate a function over private inputs without revealing them. In garbled-circuit GC protocols, prior optimization has largely treated the number of non-linear gates, especially AND gates, as a proxy for cryptographic cost, and has focused on...
PT-2026-104377
Name of the Vulnerable Software and Affected Versions Next.js versions 16.0.0 through 16.3.7 Description The next dev development server exposes a Model Context Protocol endpoint that does not reliably restrict cross-site requests. This allows a malicious website visited by a developer to access...
MPC-server Model Context Protocol Disclosure
The vulnerability of the uploadattachment function in MPC-servers for Atlassian Model Context Protocol MCP products is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected information...
The Native-Signature Boundary in Post-Quantum Distributed Authorization
Post-quantum signature migration poses a distinct systems problem when authorization is distributed among multiple parties. In native threshold signing, the signature algorithm may determine key generation, share state, preprocessing, interaction, combination, refresh, and recovery. Architectures...
Malicious code in @zalastax/nolb-mpc (npm)
The package @zalastax/nolb-mpc was found to contain malicious code. --- Credit: OpenSSF source...
EUVD-2026-42721
An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS on MX Series allows adjacent subscribers to bypass configured firewall filters. On MX Series devices with MPC10/11, LC4800/9600, and MX304 with subscribers...
EUVD-2026-41218
A division-by-zero vulnerability in the CStreamSwitcherOutputPin::DecideBufferSize function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...
CVE-2026-36909
A NULL pointer dereference in the AP4TkhdAtom::GetTrackId function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...
CVE-2026-36910: Improper Restriction of Operations within the Bounds of a Memory Buffer
An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...
CVE-2026-36912
A NULL pointer dereference in the AP4AtomSampleTable::GetSample function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...
CVE-2026-36910
An access violation in the BaseSplitterFile::Read function of Aleksoid1978 MPC-BE before commit 4341cb3 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...
CVE-2026-36911
A division-by-zero vulnerability exists in the CStreamSwitcherOutputPin::DecideBufferSize function of Aleksoid1978 MPC-BE before commit 4341cb3 . An attacker can trigger a Denial of Service (DoS) by providing a crafted MP4 file . Exploitation details and specific mitigation steps are not provided...