Dohyun Lee

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 133 Firefox ESR versions prior to 128.5 Firefox ESR versions prior to 115.18 Thunderbird versions prior to 133 Thunderbird versions prior to 128.5 Thunderbird versions prior to 115.18 Description: A flaw in Apple's GPU driver could have led to an out-of-bounds write and memory corruption due to certain WebGL operations on Apple silicon M series devices. This issue only affected applications on Apple M series hardware, with other platforms being unaffected. The vulnerability can be exploited by a remote attacker to execute arbitrary code. Recommendations: For Firefox versions prior to 133, update to version 133 or later. For Firefox ESR versions prior to 128.5, update to version 128.5 or later. For Firefox ESR versions prior to 115.18, update to version 115.18 or later. For Thunderbird versions prior to 133, update to version 133 or later. For Thunderbird versions prior to 128.5, update to version 128.5 or later. For Thunderbird versions prior to 115.18, update to version 115.18 or later. As a temporary workaround, consider disabling WebGL operations on Apple silicon M series devices until a patch is available.

A maliciously crafted email may be able to initiate FaceTime calls without user authorization. This issue can potentially lead to attacks resulting in user data leakage through FaceTime, as outgoing calls are not blocked in lock mode. A proof of concept (PoC) was developed and demonstrated, allowing for remote sound activation without clicking.

The issue is an out of bounds write vulnerability that allows local privileged attackers to execute arbitrary code.

The issue is an out-of-bounds write in SveService, allowing local privileged attackers to execute arbitrary code.

The issue is related to a buffer overflow in the ImageIO component of Apple operating systems, which can be exploited by a remote attacker using a specially crafted image file, potentially leading to arbitrary code execution. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.

The issue allows a malicious user with local access to the system to potentially exploit it and run arbitrary code as admin. This is due to an Uncontrolled Search Path vulnerability.

The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an attacker to perform remote code execution and sandbox escape.

The issue is related to insufficient protection of internal data and may disclose sensitive information when processing web content. It can be exploited by a remote attacker to gain unauthorized access to protected information.

The issue is related to a buffer overflow in the handling of private shader memory on macOS, specifically due to lenient allocation checks in Angle for glsl shaders. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability is known to affect Firefox on macOS, while other operating systems are unaffected.

A use-after-free issue was addressed with improved memory management. Processing web content may lead to arbitrary code execution. This issue is related to the WebKitGTK and WPE WebKit modules, which are used for displaying web pages. The exploitation of this issue may allow a remote attacker to execute arbitrary code.

An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crash. This issue affects Firefox and Thunderbird for macOS, with other operating systems being unaffected. The vulnerability may allow a remote attacker to execute arbitrary code by tricking the victim into visiting a specially crafted website, initiating a buffer overflow, and executing arbitrary code in the target system.

A remote user may be able to cause unexpected app termination or arbitrary code execution due to an issue that was addressed with improved state management.

The issue is related to dragging and dropping an image cross-origin, which could potentially leak the image's size. This behavior was introduced in version 109 and caused web compatibility problems, as well as security concerns. As a result, the behavior was disabled until further review. The vulnerability may allow a remote attacker to access confidential data by exploiting a security concern in the web browser's handling of cross-origin image dragging and dropping.

The issue allows executable files, such as .atloc and .ftploc, to be downloaded without presenting a warning, potentially enabling them to run commands on a user's computer. This problem is specific to Mac OS operating systems, with other operating systems being unaffected.

The issue is related to a logic problem that has been addressed with improved checks. Processing maliciously crafted web content may disclose sensitive user information.

The issue is related to improved memory handling and may lead to arbitrary code execution when processing maliciously crafted web content. It is associated with a buffer overflow in the WPE WebKit and WebKitGTK modules, allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

The issue is related to improved memory handling and may lead to arbitrary code execution when processing maliciously crafted web content. A remote attacker may exploit this to access confidential data, compromise data integrity, and cause a denial of service.

The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, which can be exploited by a low-privileged attacker with logon access to the infrastructure where Oracle VM VirtualBox executes. Successful attacks require human interaction from a person other than the attacker and can result in the takeover of Oracle VM VirtualBox. This issue applies to Windows systems only.

A logic issue was addressed with improved state management. Processing maliciously crafted web content may disclose sensitive user information. The issue is related to errors in state management in WebKitGTK and WPE WebKit modules, which can allow an attacker to access confidential data.