Skip to content
OpenAdvisories

Archive

31 October 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 3.7

    CMSE secure state may leak from stack to floating-point registers

    When using Arm Cortex-M Security Extensions (CMSE), Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of fl…

  • Low 1.0

    Nix allows macOS sandbox escape via built-in builders

    Nix is a package manager for Linux and other Unix systems. On macOS, built-in builders (such as `builtin:fetchurl`, exposed to users with `import <nix/fetchurl.nix>`) were not executed in the macOS sandbox. Thus, these builders (which are running under the `n…