Ivan Fratric

قد تؤدي معالجة دعوة تقويم مصممة بشكل خبيث إلى تلف الذاكرة بسبب مشكلة كتابة خارج الحدود (out-of-bounds write)، والتي تحدث عندما يتم كتابة البيانات خارج حدود الذاكرة المحددة.

توجد مشكلة في خلط الأنواع في مكتبة libxslt بسبب إعادة استخدام نفس حقل الذاكرة، `psvi`، لكل من ورقة الأنماط وبيانات الإدخال أثناء عمليات تحويل XML. قد يؤدي ذلك إلى تعطل التطبيق، أو تلف الذاكرة، أو رفض الخدمة، أو سلوك غير متوقع.

تم اكتشاف ثغرة أمنية يمكن أن تؤدي فيها معالجة XPath إلى سلوك غير محدد بسبب عدم وجود عمليات التحقق من القيمة الفارغة أثناء الوصول إلى السمات. وقد يؤدي ذلك إلى وصول قراءة خارج النطاق، وبالتالي إلى تلف الذاكرة.

تسمح هذه الثغرة لموقع ويب ضار بتسريب البيانات بين المصادر. وقد تم إصلاح هذه المشكلة من خلال تحسين إجراءات التحقق.

تتعلق المشكلة بخطأ «use-after-free» في XSLTProcessor عند تنفيذ كود JavaScript أثناء تحويل مستند. وقد يتيح ذلك لمهاجم عن بُعد اختراق نظام معرض للخطر. لم يتم تقديم تقدير لعدد الأجهزة التي قد تكون متأثرة في جميع أنحاء العالم. ولا توجد معلومات عن حوادث فعلية تم فيها استغلال هذه المشكلة.

تتعلق المشكلة بمقارن غير متسق في xslt/txNodeSorter، مما قد يؤدي إلى الوصول خارج النطاق المسموح به.

يمكن للمهاجم التسبب في حدوث ثغرة «استخدام بعد التحرير» (use-after-free) عبر بيانات XSLT مُصممة خصيصًا، مما يؤدي إلى تعطل يمكن استغلاله. تنشأ المشكلة من الفشل في إعادة تعيين `mCompileResult` في `txMozillaXSLTProcessor::ImportStylesheet`، مما يؤدي إلى استمرار حالة خطأ قديمة، مما يتسبب في قيام التحويلات اللاحقة باستخدام الذاكرة التي تم تحريرها ويؤدي إلى حالة «استخدام بعد التحرير».

The issue was addressed with improved bounds checks. Parsing a maliciously crafted video file may lead to unexpected system termination.

The issue was addressed with improved bounds checks. Parsing a maliciously crafted video file may lead to unexpected system termination.

The issue is related to parsing a maliciously crafted video file, which may lead to unexpected system termination. It was addressed with improved bounds checks.

The issue is related to a buffer overflow in the AppleVA component of the macOS operating system, which can lead to arbitrary code execution when processing an image. This is due to improper memory handling.

The issue involves multiple memory corruption problems that have been resolved through enhanced input validation. Processing a maliciously crafted file can lead to unexpected application termination or arbitrary code execution.

The issue is related to multiple memory corruption problems that have been addressed through improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. The vulnerability is also associated with a buffer overflow in the AppleGraphicsControl component, which could allow a remote attacker to execute arbitrary code using a specially crafted file.

The issue is related to multiple memory corruption problems that have been addressed through improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. The vulnerability is also associated with a buffer overflow in the AppleGraphicsControl component, which can allow an attacker to execute arbitrary code using a specially crafted file.

The issue is related to multiple memory corruption problems that have been addressed through improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. The vulnerability is also associated with a buffer overflow in the AppleGraphicsControl component, which can allow an attacker to execute arbitrary code using a specially crafted file.

The issue is related to a buffer overflow in the AppleGraphicsControl component of the macOS Sonoma operating system. It may allow an attacker to execute arbitrary code using a specially crafted file. The problem is associated with memory corruption issues, which can be triggered by processing a maliciously crafted file, potentially leading to unexpected app termination or arbitrary code execution.

The issue is related to a buffer overflow in the AppleVA component of the macOS operating system, which can lead to unexpected app termination or arbitrary code execution when processing a file. This is due to improper memory handling.

The issue is related to a buffer overflow in the AppleGraphicsControl component of the macOS operating system. It may allow an attacker to execute arbitrary code using a specially crafted file. The problem is associated with multiple memory corruption issues, which have been addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

The issue is related to a buffer overflow in the AppleGraphicsControl component of the macOS operating system. It may allow an attacker to execute arbitrary code using a specially crafted file. The problem is caused by multiple memory corruption issues, which have been addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

The issue is related to a buffer overflow in the AppleGraphicsControl component of the macOS operating system. It may allow an attacker to execute arbitrary code using a specially crafted file. The problem is caused by multiple memory corruption issues, which have been addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.