-
Artificial Intelligence technology development whether bring a battle for hegemony of compiler? (29th Dec 2023)
Preface: The competitors of LLVM such as GCC, Microsoft Visual C++, and Intel C++ Compiler. NVIDIA’s CUDA Compiler (NVCC) is based on the widely used LLVM open source compiler infrastructure. Furthermore, Tesla engineers wrote their own LLVM backed JIT neural compiler for Dojo. Background: Instead of relying on computing power to function, GPUs rely on…
-
Processor technology perspective: Unified Memory with shared page tables (28th Dec 2023)
Preface: NVIDIA Ada Lovelace architecture GPUs are designed to deliver performance for professional graphics, video, AI and computing. The GPU is based on the Ada Lovelace architecture, which is different from the Hopper architecture used in the H100 GPU. As of October 2022, NVLink is being phased out in NVIDIA’s new Ada Lovelace architecture. The…
-
CVE-2023-37188 Artificial Intelligence world versus tiny software components. Do not contempt a noncritical vulnerability! (27th December 2023)
Preface: Data science is an interdisciplinary field that combines statistical analysis, programming, and domain knowledge to extract valuable insights and make data-driven decisions. Background: 2020 has been a year in which the Blosc program has received significant donations, totalling $55,000 to date. The most important tasks carried out between January 2020 and August 2020. Most…
-
Processor vendor ARM responds to research paper published on Dec 2023. (21st Dec 2023)
Preface: The use of previously freed memory can have any number of adverse consequences – ranging from the corruption of valid data to the execution of arbitrary code, depending on the instantiation and timing of the flaw. The simplest way data corruption may occur involves the system’s reuse of the freed memory. They are common…
-
CVE-2023-5869 postgresql: Buffer overrun from integer overflow in array modification (20th Dec 2023)
Preface: PostgreSQL allocates memory from the work_mem pool when a query requires sorting or hashing. If there is not enough memory available in the work_mem pool, PostgreSQL will spill to disk. temp_buffers controls the amount of memory allocated for temporary tables. Does Postgres write to disk? To guard against unforeseen failures, PostgreSQL periodically writes full…
-
CVE-2023-28546: Buffer Copy Without Checking Size of Input in SPS Applications (19th Dec 2023)
Preface: But what is the significance of SPS keywords? Qualcomm didn’t mention it. Let’s trace if we can find what are the weak points of the design? Background: The Qualcomm Secure Processing Unit is an isolated hardware security core implemented in the Snapdragon 8cx Gen 3 Mobile Compute Platform SoC. As such, this security core…
-
Don’t underestimate the impact of today’s open-source software development! (18th Dec 2023)
Preface: In ten years ago, if you talk to people that your product software development use opensource products. Most likely cyber security expert will query your decision. But the trend of open-source software products usage seems change. The truth is a lot of open-source products alliances with enterprise computer vendor. So, the patch will deliver…
-
CVE-2023-4622: It should patch by processor vendor or SUSE? (14th Dec 2023)
Preface: Unix domain sockets and network sockets have different security characteristics. In general, Unix domain sockets are considered to be more secure than network sockets, as they are not exposed to the network and are only accessible to processes on the same machine. Background: A Unix domain socket aka UDS or IPC socket (inter-process communication…
-
About CVE-2023-40078: The OPUS a2dp on the Android platform has a design flaw that may lead paired device escalation of privilege (14th Dec 2023)
Preface: A2DP is a protocol supported on most Bluetooth Audio devices. Opus is open source , OPUS a2dp being introduced in Android 13. Background: In Bluetooth, there is a possibility of code-execution due to a use after free. This could lead to paired device escalation of privilege in the privileged Bluetooth process with no additional…
-
CVE-2023-42914 – An app may be able to break out of its sandbox (13th Dec 2023)
Preface: One action Apple has taken over the past few years is to harden the Safari WebContent (or “renderer”) process sandbox attack surface on iOS, most recently by removing the ability for WebContent to be exploited directly to the GPU process. Background: App Sandbox provides protection to system resources and user data by limiting your…