CVE-2026-0714

A physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS full-disk encryption on Moxa Industrial Linux 3, where the discrete TPM is connected to the CPU via an SPI bus. Exploitation requires invasive physical access, including opening the device and...

CVE-2021-27208

When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’s parameter page. IF a field read in from the parameter page is too large, this causes a buffer overflow that could lead to arbitrary code...

CVE-2019-8900

A use-after-free vulnerability in the SecureROM (Boot ROM) of Apple devices with A5 through A11 processing chips (including iPhone 4S through X, certain iPads, Apple Watches, iPod Touches, and Apple TVs) allows unauthenticated local attackers to execute arbitrary code. Exploitation requires physi...