-
CVE-2024-21468 – iommu: Fix missing return check of arm_lpae_init_pte (8th Apr 2024)
Preface: This vulnerability was posted on April 1 2024. For details, please refer to the Qualcomm April 2024 Security Bulletin. Background: EL1 can access most system registers, EL2 has additional privileges, and EL3 has all privileges. The only way that the processor can change from one exception level to a higher level is when an…
-
CVE‑2024-0072 and CVE-2024-0076: Supercomputer and AI development Interlude (4th Apr 2024)
Preface: A CUDA binary (also referred to as cubin) file is an ELF-formatted file which consists of CUDA executable code sections as well as other sections containing symbols, relocators, debug info, etc. By default, the CUDA compiler driver nvcc embeds cubin files into the host executable file. Background: To dump cuda elf sections in human…
-
CVE-2024-22246: Vulnerability in VMware SD-WAN Edge, whether relies reverse shell again? (2nd April 2024)
Preface: SD-WAN (Software-Defined WAN) is a service that overlays the hybrid network infrastructure, including SD-WAN routing. An intelligent software layer manages both MPLS WAN and other connections. Both 5G and SD-WANs are independent technologies, but together they allow businesses to access their vital applications with the reliability, coverage, and speed that 5G provides. Background: SD-WAN…
-
CVE-2024-3135: Missing CSRF token vulnerability in localAI (April 1, 2024)
Preface: Imagine that you are training your application to differentiate between two types of cars (Ferrari and Porsche). You show the app numerous images of both cars, from appearance to features to engine design. Over time, apps begin to recognize the unique features that distinguish each other. At this point, the application can tell the…
-
CVE‑2024‑0082 – Design weakness of NVIDIA ChatRTX for Windows (26-03-2024)
Preface: Unlike OpenAI’s ChatGPT, Chat with RTX doesn’t remember the context of prompts. Asking Chat with RTX to give examples of fishes in one prompt and then asking for a description of “the fishes” in the next prompt will result in a blank – users will need to spell out everything explicitly. Background: Chat with…
-
CVE-2024-2885: Use after free in Dawn in Google Chrome (26th Mar 2024)
Preface: WebGPU is a JavaScript API provided by a web browser that enables webpage scripts to efficiently utilize a device’s graphics processing unit (GPU). Google has enabled WebGPU support by default in Chrome 121, the latest version of its Chrome browser. Background: WebGPU sees physical GPU hardware as GPUAdapters. It provides a connection to an…
-
To be new or it was former: Rowhammer Attacks on AMD Zen-Based Platforms. So called ZenHammer (25-03-2024)
Preface: It is possible to trigger Rowhammer bit flips on DDR4 devices on AMD Zen 2 and Zen 3 systems despite deployed TRR mitigations, said researchers at ETH Zurich. Background: When high-energy charged particles pass through the crystal lattice of a silicon wafer, their charges can interfere with the electrons within the lattice itself and…
-
CVE-2024-29059 – [.]NET Framework Information Disclosure Vulnerability (24th Mar 2024)
Preface: Microsoft did not tell the details of the vulnerability! What happened to the .NET Framework? Can we guess what happened? [.]NET is a platform framework. Currently, there are two types: the [.]NET Framework exclusive to the Windows platform and the cross-platform .NET Core. Background: The [.]NET Framework works with applications developed in C#, F#,…
-
What are the security updates for 17.4.1? Apple, as always, won’t tell you the details of the vulnerability! (22-03-2024)
Preface: iPhone XS is powered by the A12 Bionic processor. iPhone 13 and iPhone 13 Mini use the Apple-designed A15 Bionic chip system. Additionally, the iPhone 15 is powered by a six-core Apple A16 Bionic processor. All above Bionic processors have common point. They are 64-bit ARM-based system on a chip (SoC) designed by Apple…
-
CVE-2024-22019: About Node.js HTTP module(21st Mar 2024)
Preface: Express framework is built on top of the Node.js HTTP module and provides us, with a clean way to write the backend. Background: The HTTP module extends two built-in classes: Net module: Provides network API for creating stream-based TCP servers or clients. Events module: Provides an event-driven architecture using EventEmitter class. Ref: Chunked transfer…