-
CVE-2026-0032 and CVE-2026-0038: Design weakness in Qualcomm SCM (Secure Channel Manager) and Qualcomm SCM/pKVM (Protected KVM). 17th Mar 2026
Preface: CVE-2026-0032 and CVE-2026-0038 are very similar in terms of their root cause, impact, and remedies, as they both originate from a logical error in the Android kernel memory protection subsystem. Background: In the Android Virtualization Framework (AVF), all guest operating systems (like the main Android OS and Microdroid) run at EL1, while the actual…
-
When I read the article titled “FortiGate Edge Intrusions Lead to Deep Network Compromise, Rogue Workstations” on technadu.com, I was very curious to know if it was true. (16th Mar 2026)
Preface: Quoting the second paragraph of the article: Because FortiOS uses reversible encryption …. Please see the link for article details – https://www.technadu.com/fortigate-edge-intrusions-lead-to-deep-network-compromise-rogue-workstations/623060/ Using reversible encryption in a firewall—or any security system designed to protect credentials—is considered a major security risk because it essentially stores passwords in a format equivalent to plaintext. Reversible encryption allows…
-
Explain the concept of design defect by combining CVE-2026-0006 and CVE-2026-21385 (12th Mar 2026)
Preface: The Mainline module (com[.]android[.]media[.]swcodec) contains software-onlycodecs. AMD does not touch these; they are strictly managed and updated by Google via the Play Store to ensure universal playback and security across all devices. For performance (like 4K video or gaming), AMD must provide its own hardware-accelerated codecs in the “vendor” partition of the device. To…
-
Important Security Note – A significant vulnerability (CVE-2026-0047) was historically linked to this method due to a missing permission check. (12th Mar 2026)
Preface: Important Security Note – A significant vulnerability (CVE-2026-0047) was historically linked to this method due to a missing permission check. When modifying or using this method in custom ROM development, always ensure it is wrapped in a checkDumpPermission() call to prevent unauthorized local privilege escalation Background: In the Android system, a standard application cannot…
-
Overcoming virtualization bottlenecks (Hyper-V & PCIe) 11th Mar 2026
Preface: Microsoft Hyper-V is used less than Docker and Kubernetes (K8s) in modern application deployment primarily because Docker and K8s offer superior resource efficiency, portability, speed, and scalability, making them better suited for modern cloud-native architectures like microservices. Hyper-V, as a traditional hypervisor, provides robust isolation but operates at a different layer of the infrastructure…
-
CVE-2026-20660: A remote user may be able to write arbitrary files. This issue is fixed in macOS Tahoe 26.3, macOS Sonoma 14.8.4, iOS 18.7.5 and iPadOS 18.7.5, visionOS 26.3, iOS 26.3 and iPadOS 26.3, Safari 26.3. (10th Mar 2026)
Preface: App Groups provide the legal doorway for shared access, while libxpc’s path handling acts as the security guard ensuring no one sneaks a forbidden object through that door while it’s open. Background: Libxpc is a closed-source system library in Apple iOS (and macOS) that powers the XPC (Cross Process Communication) framework. It enables secure,…
-
CVE-2026-20667: About Apple iOS 26.3, iPadOS 26.3A….., logic issue was addressed with improved checks. (9th Mar 2026)
Preface: As of March 8, 2026, Apple had released iOS 26.3.1 between March 4 and 5, 2026. Although you saw related news on March 7, this version mainly focused on bug fixes and performance optimizations for the major update released a few days earlier. The focus of this discussion is sandbox escape. Background: iOS uses…
-
The official description of CVE-2026-3543 only states “Inappropriate implementation in V8” (5th Mar 2026)
Preface: V8 is Google’s open-source, high-performance JavaScript and WebAssembly engine, written in C++, that powers Chrome and Node.js by translating JavaScript directly into native machine code. It implements all ECMA-262 ECMAScript standards, including data types, operators, objects, and functions, while optimizing execution via the V8 Ignition interpreter and V8 TurboFan compiler. Background: In the V8…
-
CVE-2025-47373: About Qualcomm – Fixed a typical type Confusion or an Improper Bounds Check within the firmware’s protocol stack. (5th Mar 2026)
Preface: 5G Timing Advance (TA) invocation is a mechanism where the base station (gNB) instructs user equipment (UE) to advance its uplink transmission timing to compensate for signal propagation delays. This synchronization ensures that signals from UEs at different distances arrive at the gNB within the same time slot, preventing interference. Background: In the 5G…
-
CVE-2025-47378: Exposure of Sensitive System Information to an Unauthorized Control Sphere in HLOS – Cryptographic Issue when a shared VM reference (4th Mar 2026)
Preface: Qualcomm’s pVM (Protected Virtual Machine) refers to the secure, isolated virtual machine environment supported by the Gunyah hypervisor. PVMFW (pVM Firmware) is the specific binary code (pvmfw.bin) executed first within a pVM to bootstrap secure boot, validate the environment, and derive unique secrets for that specific guest. In short, pVM is the container, while…