-
CVE-2025-0036: A potential vulnerability exists with the configuration of the SSS (Secure Stream Switch) – 5th Jun 2025
Preface: AMD’s Versal Adaptive SoCs are designed for high-performance computing, offering a blend of programmable logic, processing system, and AI engines, along with advanced memory and interfaces. They excel in cloud, network, and edge applications by combining heterogeneous compute with a wide range of hard IP. This architecture enables outstanding performance/watt and adapts to changing…
-
Cache-based Side-Channel Attack Against SEV (4th Jun 2025)
Originally posted by AMD 3rd Feb 2025 2025-02-17 – Updated Acknowledgement 2025-06-03 Update:A subsequent report of the same attacks was received from researchers at Graz University of Technology. Preface: FIPS 186-5 removes DSA as an approved digital signature algorithm “due to a lack of use by industry and based on academic analyses that observed that…
-
CVE-2025-27029 – Buffer Over-read in WLAN HAL (3rd Jun 2025)
Preface: Google has been transitioning HALs from HIDL to AIDL since Android 11, and by Android 13 and 14, most major HALs—including Wi-Fi (WLAN), Audio, Bluetooth, and Telephony—have adopted AIDL as the standard interface definition language. Background: In Android, defining and managing buffers in the WAN HAL (Wide Area Network Hardware Abstraction Layer) isn’t a…
-
CVE-2025-21479: Incorrect Authorization in Graphics (2nd June 2025)
Preface: Snapdragon chipsets, which are a type of System-on-a-Chip (SoC), often include memory components, such as RAM (Random Access Memory) and ROM (Read-Only Memory), within the chip itself. This integrated approach allows for faster and more efficient data processing within the device. Background: In Qualcomm Snapdragon SoCs, the Adreno GPU is responsible for graphics and…
-
CVE-2025-1763: About GitLab EE (2nd Jun 2025)
Preface: The computer industry favors GitLab because it provides a comprehensive, integrated software development platform that covers everything from planning and code management to continuous integration and deployment. This “full operation and maintenance” approach simplifies the software development life cycle and promotes collaboration between different teams. GitLab’s open source nature, free basic version, and strong…