232 matches found
CVE-2026-45198
Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control Firmware uses a pointer from non-secure memory belonging to the Rich Execution Environment RE...
CVE-2026-45198 GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted
Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control Firmware uses a pointer from non-secure memory belonging to the Rich Execution Environment RE...
CVE-2026-45198
Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control Firmware uses a pointer from non-secure memory belonging to the Rich Execution Environment RE...
EUVD-2026-54346
Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control Firmware uses a pointer from non-secure memory belonging to the Rich Execution Environment RE...
CVE-2026-45198
The CVE-2026-45198 issue involves kernel software on a platform with Trusted Execution Environment support where the GPU Firmware (RGXFW) may boot using data from non-secure memory. The problem arises when the GPU thread of control stores/retrieves internal data between private memory and main me...
Infinite Loop
nanoid is vulnerable to Infinite Loop. The vulnerability is due to the customAlphabet and nanoid functions in the non-secure module hanging indefinitely when given a negative size, where the loop counter is decremented from a negative value and never reaches its termination condition, and attacke...
Malicious code in tt-help-cli-ycl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6144be61d70f258741e5d4cc1476021f93e3ce82ffa00a3f86189537a1438a6 The package's tt-help watchdog subcommand starts a long-running agent that POSTs heartbeats to a remote server default hardcoded to...
Infinite loop
Overview Affected versions of this package are vulnerable to Infinite loop through the customAlphabet and nanoid functions in nanoid/non-secure. An attacker can hang the calling thread by supplying a negative size to either function, causing the loop counter to decrement from a negative value and...
CVE-2026-67214
nanoid Nano ID before 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination condition, spinning...
CVE-2026-67214 nanoid before 5.1.16 Infinite Loop via Negative Size in non-secure module
nanoid Nano ID before 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination condition, spinning...
CVE-2026-67214 nanoid before 5.1.16 Infinite Loop via Negative Size in non-secure module
nanoid Nano ID before 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination condition, spinning...
CVE-2026-67214
CVE-2026-67214 (nanoid) affects the Nano ID package prior to 5.1.16, specifically the non-secure module (nanoid/non-secure). The vulnerability is an infinite loop in the customAlphabet and nanoid functions when given a negative size, causing the loop counter to decrement from a negative value and...
Linux Distros Unpatched Vulnerability : CVE-2026-42546
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology...
CVE-2026-42546
OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.3.0 and prior to version 4.11.0, a resource leak exists in OP-TEE’s shared memory cleanup logic because the functio...
CVE-2026-42546
OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.3.0 and prior to version 4.11.0, a resource leak exists in OP-TEE’s shared memory cleanup logic because the functio...
EUVD-2026-41910
OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.3.0 and prior to version 4.11.0, a resource leak exists in OP-TEE’s shared memory cleanup logic because the functio...
JLSEC-2026-615 Cookie jar accepts `Secure/__Host-/__Secure-` cookies from non-secure origins in HTTP.jl
Description setcookies! stored every parsed Set-Cookie after only checking that the response scheme was http or https, with no protection symmetric to the read path shouldsend, which already withholds Secure cookies from non-secure requests. A plaintext http origin could therefore plant a Secure...
Unprotected Transport of Credentials
Overview CoreWCF.Primitives is a port of the service side of Windows Communication Foundation WCF to .NET Core. The goal of this project is to enable existing WCF services to move to .NET Core. Affected versions of this package are vulnerable to Unprotected Transport of Credentials through the...