Luyi Xing

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.1 iOS versions prior to 18.1 iPadOS versions prior to 18.1 iOS versions prior to 17.7.1 iPadOS versions prior to 17.7.1 tvOS versions prior to 18.1 macOS Sonoma versions prior to 14.7.1 watchOS versions prior to 11.1 macOS Ventura versions prior to 13.7.1 Description: A denial-of-service issue was addressed with improved input validation. A remote attacker may be able to cause a denial-of-service. Recommendations: Update to visionOS 2.1 or later. Update to iOS 18.1 or later. Update to iPadOS 18.1 or later. Update to iOS 17.7.1 or later. Update to iPadOS 17.7.1 or later. Update to tvOS 18.1 or later. Update to macOS Sonoma 14.7.1 or later. Update to watchOS 11.1 or later. Update to macOS Ventura 13.7.1 or later.

The issue concerns Incorrect Access Control, allowing access revocation evasion attacks. Once a malicious sharee obtains access credentials, Chipolo devices can be affected.

The issue is related to the implementation of the MQTT v5 protocol in Eclipse Mosquitto, which can cause excessive CPU usage. This can be exploited by a remote attacker to cause a denial of service. The problem occurs when an MQTT v5 client connects with a large number of `user-property` properties.

An out-of-bounds write issue was addressed with improved bounds checking, allowing an application to potentially execute arbitrary code with kernel privileges.

An out-of-bounds write issue was addressed with improved bounds checking, allowing an application to potentially execute arbitrary code with kernel privileges.

This issue was addressed with improved setting propagation. An attacker in a privileged network position may be able to unexpectedly alter application state.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with kernel privileges.

A use after free issue was addressed with improved memory management, which may allow an application to gain elevated privileges.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with kernel privileges.

A memory corruption issue was addressed with improved state management, allowing an application to potentially execute arbitrary code with kernel privileges.

The issue concerns insufficient protection of permission UI in WebAPKs, allowing an attacker to access privacy and security-sensitive web APIs. This can occur if the user is convinced to install a malicious application. The exploitation enables a remote attacker to gain unauthorized access to information using a specially crafted APK.

The issue is related to improper interaction between Keychain Access and Keychain Agent. This allows attackers to spoof the Keychain Server, potentially enabling remote attackers to substitute the Keychain Server.

The issue is related to improper validation of iCloud keychain item ACLs in the Apple Online Store Kit. This allows attackers to obtain access to keychain items via a crafted app. The vulnerability can be exploited by a remote attacker using a specially formed application to gain access to keychain item management.

The issue is related to a lack of protection for service data in the iOS operating system. It allows a remote attacker to obtain sensitive information about inter-app communication via a crafted app that conducts an interception attack. The attack involves an unspecified URL scheme and can provide access to protected information.

The issue is related to the Bluetooth subsystem, which does not properly restrict access to certain data. This allows attackers to read Notification Center notifications of paired devices using a crafted app. The estimated number of potentially affected devices and details about real-world incidents are not provided.