-
AMD responds to ETH Zurich researchers’ technical findings (11th Aug 2025)
Preface: AMD K10 architecture, first launched in 2007, is not considered valid for modern computing needs. While it was a significant step in AMD’s processor development, it has been superseded by newer architectures like Zen, which offer significant performance and efficiency improvements. Background: The “AMD Zen stack engine” generally refers to the AMD Zen microarchitecture…
-
CVE-2025-0932: Arm fixes userspace vulnerability in Mali GPU driver (8th Aug 2025)
Preface: The Valhall family of Mali GPUs uses the same top-level architecture as the previous generation Bifrost GPUs. The Valhall family uses a unified shader core architecture. The Arm 5th generation GPU architecture, including the Immortalis and Mali GPUs, represents a modern design for mobile and other client devices. Background: ioctl (Input/Output Control) is the…
-
AMD response to EDK2 SMM MCE Enablement Issue (7th Aug 2025)
Preface: While it’s technically possible to update UEFI firmware from within a Linux user space environment, it’s not a common or recommended practice. Most UEFI updates are designed to be installed through specific utilities provided by the motherboard manufacturer, often requiring a bootable medium or a dedicated Windows application. Background: EDK II, also known as…
-
2025-23318 and CVE-2025-23319: About NVIDIA Triton Inference Server (6th Aug 2025)
Preface: Nvidia’s security advisories released on August 4, 2025 (e.g., CVE-2025-23318, CVE-2025-23319) are specifically related to the Python backend. The Triton backend for Python. The goal of Python backend is to let you serve models written in Python by Triton Inference Server without having to write any C++ code. Background: NVIDIA Triton Inference Server is…
-
CVE-2025-23310: The NVIDIA Triton Inference Server for Windows and Linux suffers from a stack buffer overflow due to specially crafted input. (5th Aug 2025)
Preface: The NVIDIA Triton Inference Server API supports both HTTP/REST and GRPC protocols. These protocols allow clients to communicate with the Triton server for various tasks such as model inferencing, checking server and model health, and managing model metadata and statistics. Background: NVIDIA Triton™ Inference Server, part of the NVIDIA AI platform and available with…
-
3I/ATLAS’s , who are you? (4th Aug 2025)
Quote: Hawking advised against active attempts to contact alien civilizations, which could be dangerous, arguing that an advanced alien race could see the same bacteria as humans, which could lead to catastrophic consequences if they discovered Earth. Ref: https://pmc.ncbi.nlm.nih.gov/articles/PMC11462274/ Background: 3I/ATLAS, also known as C/2025 N1 and previously as A11pl3Z, is an interstellar comet discovered…
-
CVE-2025-54574: About Squid. Stay alert! (4 Aug 2025)
NVD Published Date: 08/01/2025 NVD Last Modified: 08/01/2025 Preface: While HTTP/1.0 is largely obsolete, HTTP/1.1 remains in widespread use, despite the newer HTTP/2 and HTTP/3 protocols. Though HTTP/1.1 has been updated in recent years, its core functionality is still foundational for much of the web. Does processing Uniform Resource Names consume memory? Yes, processing Uniform…
-
CVE-2025-54576: Design weakness in OAuth2-Proxy 7.10.0 and below (1 Aug 2025)
Preface: Regular Expressions are efficient in that one line of code can save you writing hundreds of lines. But they’re normally slower (even pre-compiled) than thoughtful hand written code simply due to the overhead. Generally the simpler the objective the worse Regular Expressions are. They’re better for complex operations. Background: OAuth2 Proxy is used to…
-
CVE-2025-43209: Processing maliciously crafted web content may lead to an unexpected Safari crash (31-07-2025)
Preface: In essence, built-in browsers are not just about browsing; they are about maintaining control over the core functionality and user experience of the operating system. Background: Safari and Edge, while built-in, utilize rendering engines derived from the KHTML project, specifically WebKit and Blink, respectively. WebKit is used in Safari, and Blink, a fork of…
-
CVE-2025-54419: Design weakness in version 5[.]0[.]1, Node-SAML (30th July 2025)
Preface: SSO isn’t completely secure; in fact, it depends on the design of the entire system. This month, a YouTuber, known for his camera skills, posted a video about his experience, which resulted in him losing all his miles redeemed in February 2025. He contacted airline customer service, but received no reasonable response. The airline…