Luca Todesco

The issue is related to errors in the code of the Mobile Replayer component in the GPUTools Framework. It allows attackers to execute arbitrary code in a privileged context via an app that provides a crafted pathname.

The issue is related to errors in the code of the Mobile Replayer component in the GPUTools Framework. It allows attackers to execute arbitrary code in a privileged context via an app that provides a crafted pathname.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption via a crafted app.

The issue allows local users to cause a denial of service, resulting in an application crash, by utilizing crafted bookmark metadata in a folder.

The issue allows local users to gain privileges by leveraging an unspecified type confusion during Mach task processing.

The issue is related to the IOGraphics component in Apple OS X, which lacks protection of internal data. This allows attackers to obtain sensitive kernel memory-layout information via a crafted app. Exploitation of the issue may enable a remote attacker to access protected information in kernel memory using a specially formed application.

The issue is caused by a buffer overflow in the Disk Images component of the iOS operating system. This can be exploited by a local attacker to gain elevated privileges or cause a denial of service, resulting in memory corruption.

The issue is related to a buffer overflow in the IOHIDFamily component of Apple OS X, allowing local users to gain privileges. Additionally, there are reports of a heap buffer overflow in the IOHIDSecurePromptClient and an untrusted pointer dereference, which can lead to arbitrary code execution.