Lufeng Li

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.14 Description: A memory corruption issue was addressed with improved memory handling. Recommendations: For versions prior to 10.14, update to macOS Mojave 10.14 or later to resolve the issue.

The issue involves the `Kernel` component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. This is due to a buffer overflow in memory, which can be exploited by a remote attacker to achieve the aforementioned outcomes.

The issue involves the `Bluetooth` component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. This is caused by a buffer overflow in memory.

The issue involves the `Kernel` component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. This is caused by a buffer overflow in memory, which can be exploited by a remote attacker to achieve the aforementioned effects.

The issue involves the Kernel component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. This is due to a buffer overflow in the Kernel component of the operating systems, which can be exploited by a remote attacker to execute arbitrary code or cause a denial of service.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service via a crafted app, resulting in an invalid pointer dereference.

The issue is related to errors in pointer dereferencing in the kernel of the operating systems, which can be exploited by attackers to execute arbitrary code in a privileged context or cause a denial of service via a crafted app.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. It is caused by a buffer overflow in the kernel of the operating systems.

The issue is related to errors in the code of Mac OS X and iOS operating systems. It can be exploited by a remote attacker using a specially crafted application to cause a denial of service.

The issue is related to errors in the code of Mac OS X and iOS. It can be exploited by a remote attacker using a specially crafted application to cause a denial of service.

The issue is caused by a buffer overflow in the libpthread component of the iOS kernel. This can be exploited by a local attacker to gain elevated privileges or cause a denial of service, resulting in memory corruption.

The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, by leveraging the use of an AF INET6 socket. This is caused by a buffer overflow in the Libinfo library.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption. This can be achieved via an app that uses a crafted syscall to interfere with locking. The vulnerability is caused by a buffer overflow in the libpthread library. Exploitation may enable a remote attacker to execute arbitrary code in a privileged context or cause a denial of service using a specially crafted application that utilizes a system call to the locking interface.

The issue arises from improper validation of callback parameters during the creation of a hook procedure in the Windows kernel-mode driver. This allows local users to gain privileges via a crafted application. An attacker who successfully exploits this issue could run arbitrary code in kernel mode, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

An issue exists in the Remote Access Service NDISTAPI driver where it improperly validates user-supplied input when passing data from user mode to the Windows kernel. This allows a local attacker to execute arbitrary code and take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue is related to a buffer overflow in the kavfm.sys component. This can be exploited by local users to execute arbitrary code by providing a long argument to the IOCTL 0x80030004.