Minghao Lin

تم معالجة مشكلة تتعلق بالأذونات من خلال فرض قيود إضافية على بيئة الحماية (sandbox). قد تتمكن إحدى العمليات الموجودة داخل بيئة الحماية من التحايل على قيود هذه البيئة.

تم معالجة المشكلة عن طريق إزالة الكود المعرض للخطر. قد يؤدي تشغيل أمر `hdiutil` إلى تنفيذ كود تعسفي بشكل غير متوقع.

كانت هناك مشكلة في معالجة متغيرات البيئة. تم حل المشكلة من خلال تحسين عملية التحقق من صحة البيانات. قد يتمكن أحد التطبيقات من الوصول إلى بيانات حساسة خاصة بالمستخدم.

تتعلق المشكلة بالتنظيف أو التحرير غير الصحيح للموارد، مما قد يؤدي إلى إغلاق التطبيق بشكل غير متوقع أثناء تحليل ملف. قد يتيح استغلال هذه المشكلة للمهاجم التسبب في رفض الخدمة.

The issue is related to insufficient access restrictions in the WmsRepair Service, which can be exploited to elevate privileges. This allows an attacker to affect the system.

Name of the Vulnerable Software and Affected Versions: Remote Desktop Client versions prior to 1.2.5709 Description: The issue is related to a use-after-free vulnerability in the Remote Desktop Protocol (RDP) Client of Windows operating systems. This vulnerability can be exploited by a remote attacker to execute arbitrary code. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. Recommendations: For versions prior to 1.2.5709, update to version 1.2.5709 or later to resolve the issue. As a temporary workaround, consider restricting access to the Remote Desktop Client until a patch is applied.

A type confusion issue was addressed with improved memory handling. This issue may allow a local attacker to cause unexpected system shutdown.

The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.

The issue is related to insufficient protection against local privilege escalation via Return Oriented Programming techniques, should a vulnerability exist that allows code injection and execution. This affects ARMv7-M MPU ports and ARMv8-M ports with Memory Protected Unit (MPU) support enabled, i.e., `configENABLE MPU` set to 1.

The issue is related to a heap overflow in the httpd module when handling the `/goform/saveParentControlInfo` API endpoint, specifically due to the `saveParentControlInfo()` function's handling of the `deviceId` parameter. This can allow a remote attacker to cause a denial of service or execute arbitrary code.

The issue is related to a stack-based buffer overflow vulnerability in the `form fast setting wifi set()` function of the Tenda AC18 router's firmware. This vulnerability is caused by an out-of-bounds write operation when processing the `ssid` parameter. Exploitation of this issue could allow a remote attacker to cause a denial of service.

The issue is related to a stack-based buffer overflow vulnerability in the `fromAddressNat()` function of the Tenda AC18 router's firmware. This vulnerability occurs when handling the `entrys` and `mitInterface` parameters, allowing an attacker to potentially cause a denial of service or execute arbitrary code remotely.

The issue is related to a stack-based buffer overflow in the httpd module when handling the "/goform/WifiExtraSet" API endpoint. This can potentially allow an attacker to cause a denial of service.

The issue is related to a stack-based buffer overflow in the httpd module of the Tenda AC Series Router AC18. This occurs when handling the "/goform/SetClientState" request. Exploitation of this issue may allow an attacker to impact the confidentiality, integrity, and availability of protected information.

The issue is related to a stack-based buffer overflow in the httpd module of the Tenda AC Series Router when handling the /goform/SetFirewallCfg request. This can potentially allow an attacker to impact the confidentiality, integrity, and availability of protected information.