Marco Grassi

There is an information disclosure issue in several smartphones. The device does not sufficiently validate the identity of smart wearable devices in certain specific scenarios. To launch the attack, the attacker needs to gain certain information in the victim's smartphone. Successful exploitation could cause information disclosure.

The issue is related to a buffer over-read in the `parse string` function in `cJSON.c`. This occurs when processing a string that starts with a " character and ends with a character.

The issue involves the `WebSheet` component, which allows attackers to bypass a sandbox protection mechanism via unspecified vectors. This is related to errors in security settings, potentially enabling a remote attacker to exploit the issue and bypass the sandbox protection.

The issue involves the CoreGraphics component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted JPEG file. This is caused by a buffer overflow in the CoreGraphics component of Mac OS X and iOS operating systems.

The issue allows remote attackers to cause a denial of service, resulting in a crash, by providing a crafted jpeg file. This is due to a problem in the process file function located in lepton/jpgcoder.cc.

The issue allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted jpeg file. This is due to a problem in the setup imginfo jpg function in lepton/jpgcoder.cc.

The issue allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted jpeg file. This is due to a problem in the write ujpg function in lepton/jpgcoder.cc.

The issue allows remote attackers to cause denial of service (out-of-bounds write) via a crafted jpeg file. This is due to a problem in the build huffcodes function in lepton/jpgcoder.cc.

The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault, by providing a crafted jpeg file. This is due to a problem in the setup imginfo jpg function located in lepton/jpgcoder.cc.

A remote code execution issue in the Framesequence library could allow an attacker to execute arbitrary code using a specially crafted file. This issue is related to inadequate access control in the library. The problem can be exploited by a remote attacker to execute code in the context of an unprivileged process.

The issue is related to the mishandling of skb truncation in the TCP stack, which can be exploited by local users to cause a denial of service, resulting in a system crash. This can be achieved through a crafted application that utilizes sendto system calls. The problem is associated with the net/ipv4/tcp ipv4.c and net/ipv6/tcp ipv6.c files.

The issue allows local users to gain privileges or cause a denial of service due to a heap-based buffer overflow. This is caused by the `arcmsr iop message xfer` function in `drivers/scsi/arcmsr/arcmsr hba.c` not restricting a certain length field, which can be exploited via an ARCMSR MESSAGE WRITE WQBUFFER control code.

The issue is related to the `tcp check send head` function in the Linux kernel, which does not properly maintain certain SACK state after a failed data copy. This allows local users to cause a denial of service, resulting in a `tcp xmit retransmit queue` use-after-free and system crash, via a crafted SACK option.

The issue is related to a use-after-free vulnerability in the pdf load xref function, which can be exploited by remote attackers using a crafted PDF file, leading to a denial of service (crash).

The issue allows local users to cause a denial of service via unspecified vectors, resulting in a NULL pointer dereference.

The issue is related to insufficient access control in the Intel graphics driver of Mac OS X, which can be exploited by a local attacker to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) using a specially crafted application.

The issue is related to errors in security settings of the Intel Graphics Driver component in Mac OS X, allowing a remote attacker to obtain sensitive kernel memory-layout information using a specially crafted app.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. It is caused by a buffer overflow in the IOFireWireFamily component.

The issue is related to a buffer overflow in the Multi-Touch subsystem of the operating system, which can be exploited by a remote attacker to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) using a specially crafted application.

The issue is caused by a buffer overflow in the IOHIDFamily component of iOS and Mac OS X operating systems. Exploitation of this issue may allow a remote attacker to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) using a specially crafted application.