Jonathan Zdziarski

The issue is related to the checkint division routines in the removefile function, which can be exploited to cause a denial of service. This can lead to an overflow fault and app crash via crafted data. The vulnerability is caused by a buffer overflow in the removefile function of the iOS operating system. Exploitation of the vulnerability may allow a remote attacker to cause a denial of service using specially crafted data.

The issue is related to the Notification Center in OS X, which does not properly remove dismissed notifications. This allows attackers to read arbitrary notifications via a crafted app. The vulnerability is associated with a lack of protection for service data, and its exploitation can enable a remote attacker to read arbitrary notifications using a specially formed application.

The issue relies on the hardware UID for its encryption key, making it easier for physically proximate attackers to obtain sensitive information from a Documents directory by obtaining this UID.