4 matches found
MAL-2026-12552 Malicious code in checkout-create-token (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf66f90f0fd4a6d5d6478f1b032efc6d9eaf3c2e7d02fe60b566b02ea4a68193 Package advertises itself as a token-generation library but its main entry index.js silently side-loads platform.js via a try/catch require. On impor...
Platform Loader and Manager Buffer Overflow Unauthorized Access
The vulnerability of the Platform Loader and Manager PLM microprogramming devices from AMD Versal and Alveo arises from the lack of a mechanism to reset the Secure Stream Switch SSS configuration after cryptographic operations are performed. Exploiting this vulnerability can allow an intruder to...
PT-2025-48916
Уязвимость прошивки Platform Loader and Manager PLM микропрограммных устройств AMD Versal и Alveo вызвана отсутствием сброса конфигурации Secure Stream Switch SSS после выполнения криптографических операций. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ...
Versal™ Adaptive SoC – Improper Configuration of the Secure Stream Switch during Post-Boot Cryptographic Operations
AMD ID: AMD-SB-8011 Potential Impact: N/A Severity: N/A Summary In Versal™ Adaptive SoC devices, the Platform Loader and Manager PLM implements runtime post-boot software services that allows a remote processor to command the PLM to execute cryptographic operations – including AES, SHA3, RSA, ECD...