ZDI Advisories
789 advisoriesZero Day Initiative vulnerability advisories – published disclosures and upcoming publications.
(Pwn2Own) Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability
(Pwn2Own) Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
(Pwn2Own) Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability
Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability
Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability
(Pwn2Own) Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability
(Pwn2Own) Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability
(Pwn2Own) Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability
(Pwn2Own) Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability
Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability
Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability
Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability
(Pwn2Own) Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability
Apple macOS CoreText GDEF LigCaretList Out-Of-Bounds Read Information Disclosure Vulnerability
(Pwn2Own) Alpine iLX-F511 diagapp Command Injection Vulnerability
Valkey clusterCreatePublishMsgBlock Numeric Truncation Error Remote Code Execution Vulnerability
(Pwn2Own) Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability
AVG Internet Security avgToolsSvc Link Following Local Privilege Escalation Vulnerability
Apple Safari jsToWasm IC Entrypoint Type Confusion Remote Code Execution Vulnerability
(Pwn2Own) Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability
MailEnable Auth Cleartext Storage Information Disclosure Vulnerability
MailEnable parseObjectResponse XML External Entity Processing Information Disclosure Vulnerability
Meta FAIRChem reaction adsorbate_db_path Deserialization of Untrusted Data Remote Code Execution Vulnerability
Meta FAIRChem Solvent Deserialization of Untrusted Data Remote Code Execution Vulnerability
Meta FAIRChem OMolRunner Deserialization of Untrusted Data Remote Code Execution Vulnerability
Meta FAIRChem dense_eval results-file Deserialization of Untrusted Data Remote Code Execution Vulnerability
Meta FAIRChem dense_eval dft-compute Deserialization of Untrusted Data Remote Code Execution Vulnerability
Meta FAIRChem reaction_db_path Deserialization of Untrusted Data Remote Code Execution Vulnerability