ZeroDay Findings
Sign inSign up

Every 24 hours

Tech

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

Filter by vulnerability, fix, incident, intel, or research.

  1. Research · Dec 4, 2023

    Critical Use-After-Free Vulnerability Discovered in Qualcomm Chipsets

    A significant use-after-free vulnerability has been identified in multiple Qualcomm chipsets, posing potential risks to devices utilizing these components.

    What changed

    Recent findings have uncovered a use-after-free vulnerability affecting several Qualcomm chipsets. This issue arises from memory corruption within DSP Services when a remote call is made from the High-Level Operating System (HLOS) to the Digital Signal Processor (DSP).

    Such vulnerabilities can lead to severe security risks, including unauthorized access and potential exploitation by malicious actors.

    Who is affected

    The vulnerability impacts a range of Qualcomm products, particularly those utilizing specific chipsets. This includes devices that rely on the 315 5G IoT modem firmware.

    As a result, manufacturers and users of these devices should be aware of the potential risks associated with this vulnerability.

    • Qualcomm 315 5G IoT modem firmware
    • Various IoT devices utilizing Qualcomm chipsets
    • Manufacturers of smartphones and connected devices using affected chipsets
    • Service providers relying on Qualcomm technology for network infrastructure

    What to do

    Users and manufacturers are advised to monitor for updates from Qualcomm regarding security patches that address this vulnerability. Implementing these updates promptly can mitigate the associated risks.

    Additionally, organizations should conduct risk assessments to evaluate the potential impact of this vulnerability on their systems.

  2. Research · Nov 30, 2023

    Critical Memory Corruption Vulnerability in Apple WebKit

    A serious memory corruption vulnerability has been identified in Apple's WebKit, potentially allowing for code execution through malicious web content.

    What changed

    A memory corruption vulnerability has been discovered in WebKit, the underlying engine used by several Apple products. This flaw can lead to arbitrary code execution when users interact with specially crafted web content.

    The vulnerability poses significant risks, especially in environments where HTML parsers that utilize WebKit are deployed.

    Who is affected

    Various Apple products are impacted by this vulnerability, highlighting the widespread nature of the issue across different platforms.

    The following groups and products are specifically affected:

    • Apple iOS devices, including iPhones and iPads.
    • Apple macOS systems.
    • Apple's Safari browser.
    • Non-Apple products that utilize WebKit for HTML processing.

    What to do

    Users and organizations should remain vigilant and apply any available security updates from Apple promptly to mitigate potential risks.

    It's advisable to monitor for further announcements regarding this vulnerability and its implications.