-
CVE-2025-0078: Ensuring that the identity of the requesting service is included and verified during inter-process communication (4th Mar 2025)
Preface: The Gospel of Matthew 24:37 As it was in the days of Noah, so it will be at the coming of the Son of Man. For in the days before the flood, people were eating and drinking,..etc Background: In Android, the ServiceManager is a key component in the Binder IPC (Inter-Process Communication) mechanism. It…
-
CVE-2020-24658: A year-old vulnerability is still hiding in embedded systems (3rd Mar 2025)
Preface: Many programmers continue to use Arm Compiler 5 for several reasons: Developers who have been using Arm Compiler 5 for years are familiar with its quirks and features, making it easier for them to continue using it rather than learning a new toolchain. Furthermore, Arm Compiler 5 supports older ARM architectures that may not…
-
PAGE PREFETCHER ATTACK – AMD ID: AMD-SB-7040 (28-2-2025)
Preface: Page prefetching is a technique used to improve performance by preloading data into the cache before it’s actually needed. However, the implementation and presence of a page prefetcher can vary depending on the CPU architecture and design. Background: A page prefetcher attack is a type of side-channel attack that exploits the page prefetching mechanism…