Natashenka

An input validation issue may lead to a denial of service when processing a maliciously crafted message.

An out-of-bounds read issue was addressed with improved input validation. Processing malicious video via FaceTime may lead to arbitrary code execution.

An input validation issue may allow a remote attacker to cause a system denial of service.

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 84.0.4147.89 Description: The issue is related to an inappropriate implementation in WebRTC, which can lead to heap corruption via a crafted SCTP stream. This can potentially be exploited by an attacker in a privileged network position. The vulnerability is also related to a buffer overflow in the WebRTC implementation, which can allow a remote attacker to compromise data integrity. Recommendations: For Google Chrome versions prior to 84.0.4147.89, update to version 84.0.4147.89 or later to resolve the issue. As a temporary workaround, consider restricting access to WebRTC functionality until the update is applied.

A use after free issue was addressed with improved memory management. A remote attacker may be able to cause arbitrary code execution.

An out-of-bounds read issue was addressed with improved input validation, which may allow a remote attacker to cause unexpected application termination or arbitrary code execution.

A remote attacker may be able to leak memory due to this issue. The estimated number of potentially affected devices worldwide is not specified.

A use after free issue was addressed with improved memory management. A remote attacker may be able to cause arbitrary code execution.

An out-of-bounds read issue was addressed with improved input validation. The issue is related to remote iPhone exploitation via iMessage.

An input validation issue may lead to a denial of service when processing a maliciously crafted message.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.1 Description: A memory corruption issue was addressed with improved input validation. Recommendations: For versions prior to 12.1, update to iOS 12.1 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.1 Description: A memory corruption issue was addressed with improved input validation. Recommendations: For versions prior to 12.1, update to iOS 12.1 or later to resolve the issue.

A buffer overflow issue was addressed with improved memory handling. A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution.

The issue involves the WebKit component and allows remote attackers to execute arbitrary code via a crafted web site. This is achieved by leveraging a getWasmBufferFromValue out-of-bounds read during WebAssembly compilation.

The issue involves the WebKit component and allows remote attackers to obtain sensitive credential information transmitted during a CSS mask-image fetch.

The issue involves the WebKit component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site that triggers an @generatorState use-after-free.

The issue allows remote attackers to cause a denial of service, resulting in memory corruption and SIGSEGV, via a crafted image file.

The issue allows remote attackers to cause a denial of service and execute arbitrary code via a crafted JPG. This can result in a segmentation fault and process crash.

The issue involves the WebKit component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site. This is caused by a buffer overflow in memory.

The issue involves the `WebKit` component and allows remote attackers to execute arbitrary code via a crafted web site. It is related to the mishandling of strict mode functions and insufficient access control, which can be exploited to compromise information confidentiality.