Mark Mentovai

The issue involves the AppleMobileFileIntegrity component and is related to security setting errors. It may allow a remote attacker to spoof signed code by using a matching team ID.

The issue is related to the mishandling of signed disk images, allowing attackers to execute arbitrary code in a privileged context via a crafted app.

A double free issue allows attackers to write to arbitrary files by using a crafted app that accesses `AtomicBufferedFile` descriptors.

The issue is related to the kernel's handling of virtual memory reuse, allowing attackers to cause a denial of service using a crafted app.

A race condition exists in the setreuid system-call implementation in the kernel, allowing attackers to cause a denial of service via a crafted app.

The issue is related to the setreuid and setregid system-call implementations in the kernel, which do not properly perform privilege drops. This makes it easier for attackers to execute code with unintended user or group privileges via a crafted app.

The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted iWork file.