CVE-2026-71967

OP-TEE OS 4.10.0 contains a null pointer dereference in the Widevine PTA open_session handler. When CFG_WIDEVINE_PTA is enabled, Normal World clients can trigger an unconditional NULL dereference via is_user_ta_ctx(), crashing the TEE at S-EL1 and causing a Denial of Service. The issue is fixed i...

CVE-2026-71967

OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...

CVE-2026-71967 OP-TEE OS 4.10.0 NULL Pointer Dereference DoS via Widevine PTA open_session

OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA opensession handler that allows Normal World clients to cause a denial of service when CFGWIDEVINEPTA is enabled. Attackers can open a session directly on the Widevine PT...

Thousands of Oracle NetSuite Sites at Risk of Exposing Customer Information

Cybersecurity researchers are warning about the discovery of thousands of externally-facing Oracle NetSuite e-commerce sites that have been found susceptible to leaking sensitive customer information. "A potential issue in NetSuite's SuiteCommerce platform could allow attackers to access sensitiv...

TikTok Takes Teen Accounts Private

TikTok has decided to boost privacy measures for its underage users, the popular video-sharing social-media company announced. TikTok’s popularity is being driven by teens — the company reported in 2019 about 60 percent of its 26.5 monthly users are between the ages of 16 and 24, and these latest...

DIE PTA - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DIE PTA published at the 'play' market has multiple vulnerabilities...

CVE-2011-4016

CVE-2011-4016 affects Cisco IOS PPP implementation via PTA and L2TP. The vulnerability allows remote attackers to cause a device crash (DoS) by sending crafted network traffic on affected platforms: Cisco IOS 12.2 and 15.0–15.2. Root cause details specify issues in the PPP handling during PTA/L2T...

Internet censorship in Pakistan, National Filtering and Blocking System

Internet censorship in Pakistan, National Filtering and Blocking System A Pakistan government department has called for proposals for the development, deployment and operation of a national level URL Filtering and Blocking System. The proposal request states that each box of the system "should be...

CVE-2007-0827

The Alibaba Alipay PTA Module ActiveX control PTA.DLL allows remote attackers to execute arbitrary code via a JavaScript function that invokes the Remove method with an invalid index argument, which is used as an offset for a function call...

Design/Logic Flaw

The Alibaba Alipay PTA Module ActiveX control PTA.DLL allows remote attackers to execute arbitrary code via a JavaScript function that invokes the Remove method with an invalid index argument, which is used as an offset for a function call...

CVE-2007-0827

The CVE-2007-0827 issue concerns the Alibaba Alipay PTA Module ActiveX control (PTA.DLL). Connected sources describe a memory-corruption condition in Remove() where an invalid index argument is used as an offset for a function call, enabling remote attackers to execute arbitrary code via a crafte...