Android SliceManagerTest testGrantSlicePermission Heap Buffer Overflow DoS

The vulnerability of the testGrantSlicePermission function in the SliceManagerTest.java module of Android operating systems is related to incorrect path name restrictions for restricted directories. Exploiting this vulnerability could allow an attacker to cause service failures...

Intelligent Graybox Fuzzing Via ATPG-Guided Seed Generation and Submodule Analysis

Hardware Fuzzing emerged as one of the crucial techniques for finding security flaws in modern hardware designs by testing a wide range of input scenarios. One of the main challenges is creating high-quality input seeds that maximize coverage and speed up verification. Coverage-Guided Fuzzing CGF...

CVE-2025-47318

Transient DOS while parsing the EPTM test control message to get the test pattern...

CVE-2025-47317

Memory corruption due to global buffer overflow when a test command uses an invalid payload type...

CVE-2025-47318

CVE-2025-47318 is a transient denial-of-service vulnerability in Qualcomm chipsets caused by parsing the EPTM test control message to retrieve the test pattern. The issue affects the EPTM parsing path and is described as a DoS with no confidentiality/integrity loss and high availability impact. P...

CVE-2025-47318 Buffer Over-read in BT Controller

Transient DOS while parsing the EPTM test control message to get the test pattern...

CVE-2025-47317 Buffer Over-read in BT Controller

Memory corruption due to global buffer overflow when a test command uses an invalid payload type...

CVE-2025-47317 Buffer Over-read in BT Controller

Memory corruption due to global buffer overflow when a test command uses an invalid payload type...

CVE-2025-39889

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Check encryption key size on incoming connection This is required for passing GAP/SEC/SEM/BI-04-C PTS test case: Security Mode 4 Level 4, Responder - Invalid Encryption Key Size - 128 bit This tests the security...

UBUNTU-CVE-2025-39889

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Check encryption key size on incoming connection This is required for passing GAP/SEC/SEM/BI-04-C PTS test case: Security Mode 4 Level 4, Responder - Invalid Encryption Key Size - 128 bit This tests the security...

CVE-2025-39889

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Check encryption key size on incoming connection This is required for passing GAP/SEC/SEM/BI-04-C PTS test case: Security Mode 4 Level 4, Responder - Invalid Encryption Key Size - 128 bit This tests the security...

CVE-2025-39889

CVE-2025-39889 affects the Linux kernel Bluetooth L2CAP stack by not properly validating the encryption key size on incoming connections. This failure can cause a mismatch between expected and actual key sizes, impacting security posture. Connected OSV data indicates Root has patched CVE-2025-398...

org.apache.iotdb:integration-test (>=1.3.3, <=2.0.1-beta), org.apache.iotdb:iotdb-distribution (>=1.3.3, <=2.0.1-beta) potentially affected by CVE-2025-48459 via org.apache.iotdb:iotdb-confignode (>=1.3.3, <=2.0.1-beta)

org.apache.iotdb:iotdb-confignode MAVEN version =1.3.3, =1.3.3, =1.3.3, =2.0.1-beta Source cves: CVE-2025-48459 Source advisory: OSV:GHSA-776Q-JW43-FHJX...

org.apache.iotdb:integration-test (>=1.3.3, <=2.0.1-beta), org.apache.iotdb:iotdb-distribution (>=1.3.3, <=2.0.1-beta) potentially affected by CVE-2025-48459 via org.apache.iotdb:iotdb-confignode (>=1.3.3, <=2.0.1-beta)

org.apache.iotdb:iotdb-confignode MAVEN version =1.3.3, =1.3.3, =1.3.3, =2.0.1-beta Source cves: CVE-2025-48459 Source advisory: SNYK:JAVA-ORGAPACHEIOTDB-13053298...

org.apache.iotdb:integration-test (>=1.3.3, <=2.0.1-beta), org.apache.iotdb:iotdb-distribution (>=1.3.3, <=2.0.1-beta) potentially affected by CVE-2025-48459 via org.apache.iotdb:iotdb-confignode (>=1.3.3, <=2.0.1-beta)

org.apache.iotdb:iotdb-confignode MAVEN version =1.3.3, =1.3.3, =1.3.3, =2.0.1-beta Source cves: CVE-2025-48459 Source advisory: MEND:CVE-2025-48459...

CVE-2025-47318: Buffer Over-read

Transient DOS while parsing the EPTM test control message to get the test pattern...

STAF: Leveraging LLMs for Automated Attack Tree-Based Security Test Generation

In modern automotive development, security testing is critical for safeguarding systems against increasingly advanced threats. Attack trees are widely used to systematically represent potential attack vectors, but generating comprehensive test cases from these trees remains a labor-intensive,...

PT-2025-39280

Name of the Vulnerable Software and Affected Versions Versions prior to 2025-47317 Description A memory corruption issue exists due to a global buffer overflow. This occurs when a test command utilizes an invalid payload type. Recommendations At the moment, there is no information about a newer...

Qualcomm Chipsets security vulnerabilities

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from improper handling when parsing EPTM test control messages, which could result in a denial of service...

PT-2025-39281

Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description A temporary denial-of-service condition can occur during the parsing of the EPTM test control message when retrieving the test pattern. Recommendations At the moment, there is ...