-
CVE-2024-53025: Transient DOS can occur while processing UCI command (24-03-2025)
NVD Published Date: 03/03/2025NVD Last Modified: 03/06/2025 Preface: The OpenWrt Project is a Linux operating system targeting embedded devices. Instead of trying to create a single, static firmware, OpenWrt provides a fully writable filesystem with package management. This frees you from the application selection and configuration provided by the vendor and allows you to customize…
-
CVE-2025-30472: Corosync Stack buffer overflow (23rd Mar 2025)
Preface: Even with the popularity of IP phone SIP trunking, the public telephone network still relies on PABX (Private Automatic Branch Exchange) systems in many cases. SIP trunking allows businesses to connect their IP PBX systems to the Public Switched Telephone Network (PSTN) using the Session Initiation Protocol (SIP), which facilitates voice and data communication…
-
CVE-2025-24201: iOS, iPadOS, and macOS – WebKit Out-of-Bounds Write Vulnerability Security updates (20-03-2025)
NVD Published Date: 03/11/2025NVD Last Modified: 03/14/2025 Preface: WebKit is a web browser engine used by Safari and other applications across various platforms like macOS, iOS, Linux, and Windows. It processes web content, including JavaScript, HTML, and CSS. Background: The Web Content sandbox is a security feature within WebKit that isolates web content from the…
-
CVE-2025-29909: CryptoLib’s design weakness (19-03-2025)
Preface: Human being life average 80 year old. Explorering space is a long time travel. So, it only relies on machine. Even though exploring machine can relies on solar energy. In space there is a lot of uncertainty. For example, the shock of meteorite. Furthemore, the spacecraft operates in a unique environment, the spacecraft’s power…
-
A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 (18-03-2025)
Preface: Stateless applications perform tasks based on the input provided in the current transaction. These applications make use of Content Delivery Network (CDN) and web to process short term requests. Unlike stateful applications, stateless applications do not save users data. There is no stored knowledge or information for reference to past records. Containers are widely…
-
Arm CPU Security Update: Training in Transient Execution Attacks (17th Mar 2025)
Initial release: August 8, 2023 Last updated: 14 Mar 2025 Preface: AMD’s Zen3 and Zen4 architectures are not directly related to ARM design, as they are based on AMD’s own x86-64 architecture. ARM is concerned about Training in Transient Execution (TTE) attacks because these attacks exploit vulnerabilities in speculative execution, which can affect ARM processors…
-
CVE-2025-21424: Memory corruption while calling the NPU driver APIs concurrently (16th Mar 2025)
NVD Published Date: 03/03/2025NVD Last Modified: 03/07/2025 Preface: Real-time processing of sensor data for tasks like obstacle detection and navigation is crucial, making NPUs ideal for these applications. NPUs help in real-time decision-making and control, which is essential for robotic applications. While NPUs are highly efficient for specific AI applications, they cannot replace GPUs due…
-
CVE-2025-23242 & CVE-2025-23243:NVIDIA Riva contains a vulnerability where a user could cause an improper access control issue (13th Mar 2025)
Preface: NeMo is an open source PyTorch-based toolkit for research in conversational AI that exposes more of the model and PyTorch internals. Riva supports the ability to import supported models trained in NeMo. NVIDIA Riva is a GPU-accelerated SDK for building Speech AI applications, customized for your use case, and delivering real-time performance. Background: NVIDIA…
-
CVE‑2025‑23360 – NVIDIA Nemo Framework contains a vulnerability (12th Mar 2025)
Preface: The symbol ~/. by itself is not a relative path traversal; it simply refers to the home directory of the current user. However, when combined with ./.., it can be part of a relative path traversal. Relative path traversal involves using sequences like ../ to navigate up the directory hierarchy. For example, ~/. refers…
-
CVE-2024-36347: Improper signature verification in AMD CPU ROM microcode patch loader (11th Mar 2025)
Originally published on March 5, 2025 Preface: The microcode patch loader in the CPU’s ROM (Read-Only Memory) is responsible for loading these updates into the CPU during the boot process. This ensures that the CPU runs the latest microcode, which can include important security and functionality improvements Background: The System Management Mode (SMM) execution environment…