ZeroDay Findings
Sign inSign up

Every 24 hours

Tech

Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.

Filter by vulnerability, fix, incident, intel, or research.

  1. Research · Dec 21, 2023

    Heap Buffer Overflow Vulnerability in Google Chromium WebRTC

    A newly discovered heap buffer overflow vulnerability in Google Chromium WebRTC could allow remote attackers to exploit heap corruption through specially crafted HTML pages.

    What changed

    A critical vulnerability has been identified in Google Chromium's WebRTC component, which is responsible for enabling real-time communication in web browsers. This heap buffer overflow flaw poses significant risks as it can be exploited by attackers to cause heap corruption.

    The vulnerability arises when a browser processes a crafted HTML page, potentially leading to unauthorized access or control over the affected system.

    Who is affected

    Various web browsers that utilize Google Chromium's WebRTC are at risk due to this vulnerability. The primary product affected is Google Chrome, but other browsers based on the Chromium engine may also be vulnerable.

    This issue highlights the importance of vigilance among users and organizations that rely on real-time communication features in their web applications.

    • Google Chrome
    • Other Chromium-based browsers
    • WebRTC users and developers

    What to do

    Users and administrators are advised to monitor for updates from Google regarding patches for this vulnerability. It is crucial to ensure that all browsers are kept up-to-date to mitigate the risk of exploitation.

    Implementing security best practices, such as avoiding untrusted websites and being cautious with HTML content, can help reduce exposure to potential attacks.

  2. Research · Dec 11, 2023

    Critical Vulnerability Discovered in Qualcomm Chipsets

    A significant vulnerability has been identified in multiple Qualcomm chipsets, potentially impacting device security and performance due to memory corruption issues.

    What changed

    A newly discovered vulnerability in multiple Qualcomm chipsets has raised concerns regarding device security. This issue stems from a use of out-of-range pointer offset, which can lead to memory corruption when handling large lists of sync points in an AUX command.

    Who is affected

    The vulnerability impacts a variety of Qualcomm products, posing risks to users and manufacturers alike. Below are key details regarding affected entities.

    • Qualcomm chipsets utilized in smartphones and tablets.
    • Devices running on ar8035 firmware.
    • Manufacturers that integrate Qualcomm technology into their products.
    • End-users relying on affected devices for daily operations.

    What to do

    To mitigate the risks associated with this vulnerability, it is crucial for affected parties to remain vigilant. Users should ensure their devices are updated with the latest firmware and security patches.

    • Monitor for updates from Qualcomm regarding firmware fixes.
    • Implement security best practices to safeguard devices.
    • Stay informed about potential exploits related to this vulnerability.