613 matches found
PT-2023-5654 · Apple · Macos Monterey +6
Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.6 macOS Monterey versions prior to 12.7 tvOS versions prior to 17 watchOS versions prior to 10 iOS versions prior to 17 iPadOS versions prior to 17 Description: The issue is caused by a buffer overflow in th...
About the security content of iOS 17 and iPadOS 17
About the security content of iOS 17 and iPadOS 17 This document describes the security content of iOS 17 and iPadOS 17. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
CVE-2023-40218
An issue was discovered in the NPU kernel driver in Samsung Exynos Mobile Processor 9820, 980, 2100, 2200, 1280, and 1380. An integer overflow can bypass detection of error cases via a crafted application...
PT-2023-6037 · Apple · Ios +2
Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 iPadOS versions prior to 16.5 iOS versions prior to 16.5 Description: The issue is related to a buffer overflow in the Neural Engine component of the operating systems, which may allow an attacker to gain elevate...
About the security content of iOS 15.7.8 and iPadOS 15.7.8
About the security content of iOS 15.7.8 and iPadOS 15.7.8 This document describes the security content of iOS 15.7.8 and iPadOS 15.7.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
About the security content of watchOS 9.6
About the security content of watchOS 9.6 This document describes the security content of watchOS 9.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of macOS Ventura 13.5
About the security content of macOS Ventura 13.5 This document describes the security content of macOS Ventura 13.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...
Brute-Forcing a Fingerprint Reader
Its neither hard nor expensive: Unlike password authentication, which requires a direct match between what is inputted and whats stored in a database, fingerprint authentication determines a match using a reference threshold. As a result, a successful fingerprint brute-force attack requires only...
About the security content of watchOS 9.5
About the security content of watchOS 9.5 This document describes the security content of watchOS 9.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of iOS 16.5 and iPadOS 16.5
About the security content of iOS 16.5 and iPadOS 16.5 This document describes the security content of iOS 16.5 and iPadOS 16.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
The vulnerability of the NPU driver for Samsung Exynos Android operating systems allows attackers to execute arbitrary code.
The vulnerability of the NPU driver for Samsung Exynos Android operating systems is related to incorrect handling of exceptional states. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
TensorFlow Denial of Service vulnerability
Impact A malicious invalid input crashes a tensorflow model Check Failed and can be used to trigger a denial of service attack. To minimize the bug, we built a simple single-layer TensorFlow model containing a Convolution3DTranspose layer, which works well with expected inputs and can be deployed...
About the security content of macOS Ventura 13.3
About the security content of macOS Ventura 13.3 This document describes the security content of macOS Ventura 13.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...
ChatGPT leaks bits of users' chat history
New gadgets and software come with new bugs, especially if they're rushed. We can see this very clearly in the race between tech giants to push large language models LLMs like ChatGPT and its competitors out the door. In the most recently revealed LLM bug, ChatGPT allowed some users to see the...
Experts Discover Flaw in U.S. Govt's Chosen Quantum-Resistant Encryption Algorithm
A group of researchers has revealed what it says is a vulnerability in a specific implementation of CRYSTALS-Kyber, one of the encryption algorithms chosen by the U.S. government as quantum-resistant last year. The exploit relates to "side-channel attacks on up to the fifth-order masked...
SUSE CVE-2022-26076
Uncontrolled search path element in the IntelR oneAPI Deep Neural Network oneDNN before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-26076
Uncontrolled search path element in the IntelR oneAPI Deep Neural Network oneDNN before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
UBUNTU-CVE-2022-26076
Uncontrolled search path element in the IntelR oneAPI Deep Neural Network oneDNN before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-26076
Uncontrolled search path element in the IntelR oneAPI Deep Neural Network oneDNN before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-26076
Intel oneAPI Deep Neural Network (oneDNN) before 2022.1 contains an uncontrolled search path element that may allow an authenticated user to escalate privileges via local access. Public sources (Red Hat CVE entry and Intel advisory) confirm the affected component and the local-privilege escalatio...