-
CVE-2025-59936: About get-jwks, OAuth 2.0, and OpenID Connect (OIDC). Be vigilant! (30th Sep, 2025)
Preface: JSON Web Key Sets (JWKS) are a popular and essential component for secure, decentralized authentication systems, particularly in OAuth 2.0 and OpenID Connect (OIDC) flows, where they provide a standardized, interoperable, and scalable method for clients to obtain the public keys needed to verify the digital signatures of JSON Web Tokens (JWTs) without requiring…
-
CVE-2025-55780: AI LLM developers should not underestimate Mupdf design flaw! (29-09-2025)
Preface: LLMs are built on machine learning: specifically, a type of neural network called a transformer model. How do LLMs read PDFs? The first step was to extract the text blocks from the PDF using pdfplumber . Each text block came with its coordinates, which allowed to analyze their spatial relationships. Next, I created a “window” around each text block…
-
CVE-2025-23348 and CVE-2025-23349: About NVIDIA Megatron-LM (26-09-2025)
Preface: For years, OpenAI’s GPT series has been a dominant force, while NVIDIA’s Megatron-LM has provided a powerful framework for training these massive models. NVIDIA Megatron-LM faces competition from several other frameworks especially Microsoft DeepSpeed, Hugging Face Accelerate, JAX/Flax and PyTorch Lightning. Both PyTorch Lightning and NVIDIA Megatron-LM are built on top of the PyTorch…
-
Is the impact of the CVE-2025-10184 vulnerability not limited to PoC test devices? (25-09-2025)
Preface: The com.android[.]providers[.]telephony and com[.]android[.]phone packages are not similar in function; they serve different and distinct purposes in the Android telephony system. This package (com[.]android[.]providers[.]telephony) is a content provider that manages and provides access to telephony-related data. Background: The Telephony provider and its associated classes like com[.]android[.]providers[.]telephony[.]PushMessageProvider are common in Android smartphones as they are…
-
AMD responds to DRAM-related side-channel attacks (24th Sep 2025)
Preface: DDR5 memory has two independent 32-bit sub-channels per DIMM, while DDR4 uses a single 64-bit channel. There are many types of DDR5 DIMMs. Background: DRAM side-channel attacks exploit timing differencesand row buffer behavior in the memory subsystem — particularly row conflicts and row hits — to infer sensitive information. These behaviors are fundamental to…
-
Chypnosis on FPGAs – AMD is investigating whether on specific devices and components are affected and plans to provide updates as new findings emerge.(22nd Sep 2025)
Preface: AMD uses FPGAs (Field-Programmable Gate Arrays) in High-Performance Computing (HPC) by offering accelerator cards and adaptive SoCs that allow users to program custom hardware for HPC workloads in fields like machine learning, data analytics, and scientific simulations. AMD manufactures FPGA-based accelerator cards that enable users to program applications directly onto the FPGA, eliminating the…
-
CVE-2025-10585: Type Confusion in V8 (22nd Sep 2025)
Preface: Type confusion is a vulnerability where a program accesses a resource using an incompatible type, leading to unexpected behavior or memory corruption. This often occurs when a program misinterprets the type of data being used, potentially leading to the execution of the wrong code or the disclosure of sensitive information. This can happen due…
-
CVE-2025-3231: About ARM Mali. Learn more about the details (19th Sep 2025)
NVD Published Date: 09/08/2025NVD Last Modified: 09/08/2025 Preface: The Mali kernel driver and userspace libraries are found in different locations depending on whether the system is Android or a general Linux distribution, and also based on the specific Mali GPU generation and the SoC vendor’s implementation. Background: Mali GPU is a hardware accelerator. ioctl (Input/Output…
-
2025-23316 and CVE-2025-23268: About NVIDIA Triton Inference Server (18th Sep 2025)
Preface: AI deployment is accelerated by hardware advancements (especially GPUs), ML platforms and MLOps for automation, the use of pre-trained models via transfer learning, containerization and orchestration for scalability, cloud infrastructure providing on-demand resources, and industry collaborations and specialized data partners to streamline various stages of the AI lifecycle. Background: NVIDIA Triton Inference Server is…
-
Phoenix: Rowhammer Attacks on DDR5 Memory – AMD ID: AMD-SB-7048 (17-09-2025)
Preface: The researchers behind the related “ZenHammer” work found that using traditional timing side-channel methods for synchronization was less reliable on AMD Zen platforms compared to Intel CPUs. The Phoenix attack was designed to overcome these challenges using a “self-correcting” technique. Background: Phoenix attack does not use XOR or similar software-level bit manipulation. Instead, it…