it has now assigned another CVE ID, CVE-2023-5129, marking it as a critical issue in libwebp with a maximum 10/10 severity rating. This change has significant implications for other projects using the libwebp open-source library.
Now officially recognized as a libwebp flaw, it involves a heap buffer overflow in WebP, impacting Google Chrome versions preceding 116.0.5845.187.
Now officially recognized as a libwebp flaw, it involves a heap buffer overflow in WebP, impacting Google Chrome versions preceding 116.0.5845.187.
Forwarded from Ackyl Дристаяр
This media is not supported in your browser
VIEW IN TELEGRAM
Idk what to reply so
Google patched Pixels in its September update against the vulnerability, which is tracked as CVE-2023-4211
Forwarded from Marshal ✨ via @tt_video_dwnld_bot
This media is not supported in your browser
VIEW IN TELEGRAM
👍2
https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2539
Samsung with its Knox and security modules in kernel be like
Samsung with its Knox and security modules in kernel be like
So I bought myself a new 5G capable router from MikroTik.
The initial setup and impressions awas awesome, untill I just updated the modem firmware...
It stopped connecting to 5G base station.
The problem doesn't seem to be very new, there's forum posts about it - https://confusedbird.com/thread-184.html. In those cases people say downgrading firmware helped them.
I tried to look how exactly the modem can be downgraded, and to do that I checked the update files.
Those, not very exciting, has a complete Android-like structure, so that means that the 5G modem is basically powered by the stripped version of android, and even has a recovery inside.
That's not something new to Qualcomm modems thought.
So if it's a Qualcomm device, it has an ADB, fastboot, and the most exciting the EDL mode and you could flash the firmware using qflash, just like your Xiaomi.
Fortunally the Partitions, Firehose and table are there and you can just flash it.
Unfortunally the modem is m2, and I do not have a USB m2 case. So the only way to downgrade it is to flash an update.zip that will downgrade it, and there's no such zips publicly avaible.
So at that point the only way is ask MikroTik support.
The initial setup and impressions awas awesome, untill I just updated the modem firmware...
It stopped connecting to 5G base station.
The problem doesn't seem to be very new, there's forum posts about it - https://confusedbird.com/thread-184.html. In those cases people say downgrading firmware helped them.
I tried to look how exactly the modem can be downgraded, and to do that I checked the update files.
Those, not very exciting, has a complete Android-like structure, so that means that the 5G modem is basically powered by the stripped version of android, and even has a recovery inside.
That's not something new to Qualcomm modems thought.
So if it's a Qualcomm device, it has an ADB, fastboot, and the most exciting the EDL mode and you could flash the firmware using qflash, just like your Xiaomi.
Fortunally the Partitions, Firehose and table are there and you can just flash it.
Unfortunally the modem is m2, and I do not have a USB m2 case. So the only way to downgrade it is to flash an update.zip that will downgrade it, and there's no such zips publicly avaible.
So at that point the only way is ask MikroTik support.
But on the next day I tried to seach more information yet again, I re-read the forum posts and LTE logs I get. The most intresting part is:
The very intresting part is that my modem searches for the
For those don't know, 5G NSA is a transition technology that can use parts of 5G network, and 5G SA is a proper one that doesn't rely on the 4G. https://source.android.com/docs/core/connect/5g-nsa?hl=en
My operator actually launched 5G SA a week ago, excpect you need to manually activate it in the operator's website and it doesn't not avaible for all tariffs yet.
So upon searching I found that there's 2 branches of firmwares the included 5G router (RG502QE) has:
R11: Legacy with semi-broken 5G SA
R13: New one with fixed 5G SA
For me it is unavaible, so when my modem's new firmware tries to use 5G SA, it get's denied by the tower and does nothing except searching for another 5G SA towers.
At this point there's a few ways to fix it, either use older firmware or try to somehow disable 5G SA in the modem.
So, those modems are usually support AT commands, I found a leaked AT commands datasheet and checked if there's anything about 5G NSA, and indeed I found that there's a toggle.
The problem is that if you send a command it won't trigger any new search or registration and the modem will still ignore the tower it markered as rejected.
And finally after some digging I was able to run the command before the initial search, and it actually connect yet again to the tower, just like the older firmware!
I don't really know what to say for the conclusions. It's very intresting that the small m2 card itself actually contains the variant of Android and OEMs can mess things there as well.
lte1: rcvd +QENG: "servingcell","LIMSRV","NR5G-SA","FDD", ...lte1 mbim: register state: denied, gsm operator ...The very intresting part is that my modem searches for the
NR5G-SA base stations and it did in fact find it, but it rejects the registration for some reason.For those don't know, 5G NSA is a transition technology that can use parts of 5G network, and 5G SA is a proper one that doesn't rely on the 4G. https://source.android.com/docs/core/connect/5g-nsa?hl=en
My operator actually launched 5G SA a week ago, excpect you need to manually activate it in the operator's website and it doesn't not avaible for all tariffs yet.
So upon searching I found that there's 2 branches of firmwares the included 5G router (RG502QE) has:
R11: Legacy with semi-broken 5G SA
R13: New one with fixed 5G SA
For me it is unavaible, so when my modem's new firmware tries to use 5G SA, it get's denied by the tower and does nothing except searching for another 5G SA towers.
At this point there's a few ways to fix it, either use older firmware or try to somehow disable 5G SA in the modem.
So, those modems are usually support AT commands, I found a leaked AT commands datasheet and checked if there's anything about 5G NSA, and indeed I found that there's a toggle.
AT+QNWPREFCFG="nr5g_disable_mode", 1 - Disables 5G SA completely.The problem is that if you send a command it won't trigger any new search or registration and the modem will still ignore the tower it markered as rejected.
And finally after some digging I was able to run the command before the initial search, and it actually connect yet again to the tower, just like the older firmware!
I don't really know what to say for the conclusions. It's very intresting that the small m2 card itself actually contains the variant of Android and OEMs can mess things there as well.