Milan Stute

A logic issue was addressed with improved state management. An attacker in a privileged network position can modify driver state.

The issue allows an attacker in physical proximity to passively observe device names in AWDL communications. This is possible due to the way device names are handled. The estimated number of potentially affected devices is not specified.

A file access issue existed with certain home folder files, allowing a malicious application to potentially read sensitive location information. This issue was addressed with improved access restrictions.

A user privacy issue allowed devices to be passively tracked by their WiFi MAC address. This issue has been addressed by removing the broadcast MAC address.

A user privacy issue allowed devices to be passively tracked by their WiFi MAC address. This issue has been addressed by removing the broadcast MAC address.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.1 macOS Mojave versions prior to 10.14.1 tvOS versions prior to 12.1 watchOS versions prior to 5.1 Description: A denial of service issue was addressed with improved validation. Recommendations: For iOS versions prior to 12.1, update to iOS 12.1 or later. For macOS Mojave versions prior to 10.14.1, update to macOS Mojave 10.14.1 or later. For tvOS versions prior to 12.1, update to tvOS 12.1 or later. For watchOS versions prior to 5.1, update to watchOS 5.1 or later.