ZDI Advisories
2066 advisoriesZero Day Initiative vulnerability advisories – published disclosures and upcoming publications.
Sante
AVG Internet Security avgToolsSvc Link Following Local Privilege Escalation Vulnerability
(Pwn2Own) Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
Apple macOS CoreText GDEF LigCaretList Out-Of-Bounds Read Information Disclosure Vulnerability
MedDream
MedDream
Adobe
Siemens
(Pwn2Own) Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability
(Pwn2Own) Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability
Valkey clusterCreatePublishMsgBlock Numeric Truncation Error Remote Code Execution Vulnerability
Apple Safari jsToWasm IC Entrypoint Type Confusion Remote Code Execution Vulnerability
(Pwn2Own) Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability
(Pwn2Own) Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability
(Pwn2Own) Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability
(Pwn2Own) Alpine iLX-F511 diagapp Command Injection Vulnerability
(Pwn2Own) Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability
Meta
Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability
Hugging Face
(Pwn2Own) Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability
Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability
Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability
Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability
MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability
MailEnable Auth Cleartext Storage Information Disclosure Vulnerability
Meta FAIRChem Slab Deserialization of Untrusted Data Remote Code Execution Vulnerability
Meta FAIRChem AdsorbMLRunner Deserialization of Untrusted Data Remote Code Execution Vulnerability