CVE-2025-0034

Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRVSOCCMDIDSRIOVSPATIALPART and cause read or write past the end of allocated arrays, potentially resulting in a loss of platform integrity or denial of service...

CVE-2025-0034

CVE-2025-0034 concerns the TEE SOC Driver. The root cause is insufficient parameter sanitization, enabling an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_SPATIAL_PART that can read or write past the end of allocated arrays, potentially compromising platform integrity or causing a denial of...

CVE-2025-50690

A Cross-Site Scripting XSS vulnerability exists in SpatialReference.org OSGeo/spatialreference.org versions prior to 2025-05-17 commit 2120adfa17ddd535bd0f539e6c4988fa3a2cb491. The vulnerability is caused by improper handling of user input in the search query parameter. An attacker can craft a...

Malicious code in com.microsoft.azure.spatial-anchors-sdk.android (npm)

The package com.microsoft.azure.spatial-anchors-sdk.android was found to contain malicious code...

MAL-2025-17324 Malicious code in com.microsoft.azure.spatial-anchors-sdk.android (npm)

The package com.microsoft.azure.spatial-anchors-sdk.android was found to contain malicious code...

MAL-2025-17327 Malicious code in com.microsoft.azure.spatial-anchors-sdk.windows (npm)

The package com.microsoft.azure.spatial-anchors-sdk.windows was found to contain malicious code...

MAL-2025-17325 Malicious code in com.microsoft.azure.spatial-anchors-sdk.core (npm)

The package com.microsoft.azure.spatial-anchors-sdk.core was found to contain malicious code...

MAL-2025-17326 Malicious code in com.microsoft.azure.spatial-anchors-sdk.ios (npm)

The package com.microsoft.azure.spatial-anchors-sdk.ios was found to contain malicious code...

Malicious code in com.microsoft.azure.spatial-anchors-sdk.windows (npm)

The package com.microsoft.azure.spatial-anchors-sdk.windows was found to contain malicious code...

MAL-2025-17347 Malicious code in com.microsoft.spatialaudio.spatializer.unity (npm)

The package com.microsoft.spatialaudio.spatializer.unity was found to contain malicious code...

Malicious code in com.microsoft.spatialaudio.spatializer.unity (npm)

The package com.microsoft.spatialaudio.spatializer.unity was found to contain malicious code...

Malicious code in com.microsoft.azure.spatial-anchors-sdk.ios (npm)

The package com.microsoft.azure.spatial-anchors-sdk.ios was found to contain malicious code...

Malicious code in com.microsoft.azure.spatial-anchors-sdk.core (npm)

The package com.microsoft.azure.spatial-anchors-sdk.core was found to contain malicious code...

CVE-2025-50690

CVE-2025-50690 describes a reflected XSS in SpatialReference.org (OSGeo/spatialreference.org). The issue arises from improper handling of user input in the search query parameter, enabling an unauthenticated attacker to craft a URL that reflects and executes arbitrary JavaScript in a victim’s bro...

HumanSAM: Classifying Human-Centric Forgery Videos in Human Spatial, Appearance, and Motion Anomaly

Numerous synthesized videos from generative models, especially human-centric ones that simulate realistic human actions, pose significant threats to human information security and authenticity. While progress has been made in binary forgery video detection, the lack of fine-grained understanding ...

3S-Attack: Spatial, Spectral and Semantic Invisible Backdoor Attack against DNN Models

Backdoor attacks involve either poisoning the training data or directly modifying the model in order to implant a hidden behavior, that causes the model to misclassify inputs when a specific trigger is present. During inference, the model maintains high accuracy on benign samples but misclassifie...

Deep Spatial Neural Net Models with Functional Predictors: Application in Large-Scale Crop Yield Prediction

Accurate prediction of crop yield is critical for supporting food security, agricultural planning, and economic decision-making. However, yield forecasting remains a significant challenge due to the complex and nonlinear relationships between weather variables and crop production, as well as...

Movable Antennas Meet Low-Altitude Wireless Networks: Fundamentals, Opportunities, and Future Directions

With the rapid development of low-altitude applications, there is an increasing demand for low-altitude wireless networks LAWNs to simultaneously achieve high-rate communication, precise sensing, and reliable control in the low-altitude airspace. In this paper, we first present a typical system...

EVA-S2PMLP: Secure and Scalable Two-Party MLP via Spatial Transformation

Whitepaper called EVA-S2PMLP: Secure and Scalable Two-Party MLP via Spatial Transformation...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a corrupted spatial cache and a potential double allocation problem...