-
CVE-2026-66086: About modem OTA stack – This article was published on October 13, 2026.
Preface: A modem OTA (Over-the-Air) stack refers to the software and protocol components inside a cellular or wireless modem that handle data and control messages received directly “over the air” from base stations or network operators—most commonly via radio resource control, broadcast channels, or system information blocks (such as SIB1 in 4G/5G networks). Background: The…
-
Qualcomm 2026 Oct Security Bulletin: CVE-2026-25267 – Missing Authorization in Core
Official released 5th Oct 2026 Preface: The memory (RAM) for the Snapdragon 888+ 5G Mobile Platform is technically an external chip, but it is physically stacked directly on top of the processor using a technology called PoP (Package on Package). When a CPU chip boots up, hardware security features (such as the memory protection unit…
-
Retrospective or required attention? CVE-2025-10286 published in Qualcomm’s security bulletin on October 5, 2026.
Preface: CVE-2025-10286: Details of this third-party CVE released by ARM, reported on October 27, 2025, with a customer notification date of July 6, 2026. Information about this vulnerability was also published in Qualcomm’s security bulletin on October 5, 2026. Background: This article described does not refer to a general CPU L1/L2 data cache. Instead, it…
-
CVE-2026-75895: About libsmpp35 from 0.1.0 through 1.8.0 out of bound read issue
This article published on 22nd Sep 2026. NVD Release Date: 18th September 2026 Preface: When a fraudster uses virtual Direct Inward Dialing (DID) numbers to blast scam SMS messages, they intentionally create a fragmented digital trail designed to stall, confuse, and exhaust law enforcement resources. Compared to regularly discovered SMS design flaws, the risk ratings…
-
CVE-2026-90648: A sandbox escape vulnerability exists in wasm2c of WebAssembly wabt (version 1.0.41 and earlier), which affects a wide range of technical fields.
Source: Mitre, NVD – Published: 2026-09-12 Preface: Automotive & Safety-Critical SystemsIn industries where software must comply with rigid safety certifications (such as ISO 26262 for automotive or DO-178C for aerospace), executing arbitrary code at runtime using a Just-In-Time (JIT) compiler is completely forbidden. The wasm2c Advantage: Since wasm2c acts entirely as an Ahead-Of-Time (AOT) translator…
-
CVE-2026-65349 is an out-of-bounds read vulnerability (CWE-125) in the XNU Kernel caused by inadequate input validation of data_length in IOKit interactions. (21st Aug 2026)
Preface: CVE-2026-65349 is a vulnerability located inside the XNU kernel. Although it is often triggered by attackers using WebKit as a springboard, its fundamental flaw lies in the lack of strict boundary checks when the kernel parses input parameters from user space (through calls like ioctl/IOKit), leading to out-of-bounds reads of kernel memory. Background: After…
-
CVE-2026-25268: Stack-based Buffer Overflow in WLAN Host (8th Jul 2026)
Preface: The vulnerability’s entry point: The memory corruption in the Qualcomm driver is not caused by parsing Radiotap, but rather by the driver parsing invalid HT40 channel layout elements (HT Capabilities / HT Operation IEs) carried in 802.11 management frames (such as Beacon, Probe Response, or Channel Switch Announcement) sent from the remote base station…
-
CVE-2025-48595 – Integer Overflow (CWE-190) in the Android Framework, affecting API and system services. (9th June 2026)
Preface: The “2025” in the CVE ID means the vulnerability was first discovered, reported, or reserved in 2025. Why Critical Vulnerabilities “Stay Silent”? If a zero-day is announced before a patch exists, every hacker in the world learns exactly how to exploit millions of devices. Keeping it confidential gives engineers time to build and test…
-
Security Focus : MacOS Tahoe versions 26.1 and 26.2: About spanning sandbox escapes (BackBoardServices) – 8th June 2026
Preface: MacOS Tahoe (version 26, specifically updates 26.1 and 26.2 released in late 2025) is designed for a broad range of Apple Silicon and select Intel-based Mac computers. Key Supported Apple Products (as of late 2025/early 2026) includes MacBook Neo (2026), MacBook Air, MacBook Pro, iMac: 2020 and later models, Mac mini 2020 and later…
-
MacOS Tahoe 26.5.1 (Build 25F80) update on 2nd June 2026. The walled garden tells you something. (5th June 2026)
Preface: Apple does not officially describe itself as a “walled garden.” Instead, that term is used by analysts, journalists, and critics to describe Apple’s tightly controlled ecosystem, where hardware, software, and services are designed to work together exclusively. Background: Why Network Extensions Crashed M5 Macs? This internal memory filtering is precisely why traditional network content…