Most recent entries from all

certfr-2026-avi-1158 — De multiples vulnérabilités ont été découvertes dans Google Android. Certaines d'entre elles permettent à un attaquant…

2026-10-29T09:26:28.644057+00:00

certfr-2026-avi-1158

fkie_cve-2026-45197

2026-10-29T09:26:28.644101+00:00

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory.

The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a TOCTOU bug was present which allowed the earlier check results to be invalidated.

GHSA-49pq-rgj7-q6mh

2026-10-29T09:26:28.644137+00:00

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a read and/or write data outside the Guest's virtualised GPU memory.

The firmware uses data provided by the Guest VM to set up accesses to memory. It validated this before use, but a TOCTOU bug was present which allowed the earlier check results to be invalidated.