R00Tkitsmm

The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.

An out-of-bounds read issue was addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

A validation issue was addressed with improved input sanitization, allowing an application to potentially read restricted memory. This issue is related to the Metal Framework library and can be exploited by remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the Metal Framework library is required to exploit this vulnerability.

The issue is related to a buffer overflow in the ImageIO component of macOS, iOS, iPadOS, tvOS, and watchOS, which may allow an attacker to execute arbitrary code when processing an image. This is due to improper memory handling.

An out-of-bounds read issue was addressed with improved input validation. Processing an image may result in disclosure of process memory.

A buffer overflow issue was addressed with improved bounds checking. This issue may lead to arbitrary code execution when processing an image. The vulnerability is related to the ImageIO component in MacOS, iOS, tvOS, iPadOS, and watchOS operating systems, which can be exploited by an attacker using a specially crafted file.

A memory corruption issue was addressed with improved state management, allowing an app to potentially execute arbitrary code with kernel privileges.

An out-of-bounds read was addressed with improved input validation. Processing an image may result in disclosure of process memory.

An out-of-bounds read issue was addressed with improved input validation. Processing a maliciously crafted image may result in disclosure of process memory.

The issue is related to an out-of-bounds read in memory, which may allow a remote attacker to disclose protected information. This can occur when processing an image, potentially resulting in the disclosure of process memory.

The issue is related to an out-of-bounds read in the ImageIO component, which can result in the disclosure of process memory when processing an image. This can potentially allow a remote attacker to reveal protected information. The estimated number of potentially affected devices worldwide is not specified.

An out-of-bounds read was addressed with improved input validation. Processing an image may result in disclosure of process memory.

A memory corruption issue was addressed with improved state management. Processing an image may lead to a denial-of-service.

A memory corruption issue was addressed with improved input validation, which may allow a malicious application to execute arbitrary code with kernel privileges. This issue is related to the IOMobileFrameBuffer function in the kernel of iOS, iPadOS, and macOS operating systems, and is associated with a buffer overflow in memory. Apple is aware of a report that this issue may have been actively exploited. The estimated number of potentially affected devices is not specified.

This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this issue. The specific flaw exists within the prl naptd process. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this issue to escalate privileges and execute code in the context of the hypervisor.

The issue involves the CoreGraphics component and is related to pointer dereference errors. It allows attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a specially crafted font.