Siddharth Aeri

قد يتمكن تطبيق من التسبب في إنهاء غير متوقع للنظام بسبب عدم كفاية عمليات التحقق.

An authentication issue was addressed with improved state management, allowing a local attacker to potentially view the previous logged in user’s desktop from the fast user switching screen.

A memory corruption issue was addressed with improved memory handling, which may allow a malicious application to execute arbitrary code with kernel privileges.

A memory corruption issue was addressed with improved input validation, which may allow a malicious application to execute arbitrary code with kernel privileges. This issue is related to the IOMobileFrameBuffer function in the kernel of iOS, iPadOS, and macOS operating systems, and is associated with a buffer overflow in memory. Apple is aware of a report that this issue may have been actively exploited. The estimated number of potentially affected devices is not specified.

A memory consumption issue was addressed with improved memory handling, which may allow an application to execute arbitrary code with kernel privileges.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.5 iPadOS versions prior to 14.5 Description: A logic issue was addressed with improved validation. A malicious application may be able to execute arbitrary code with system privileges. Recommendations: For iOS versions prior to 14.5, update to iOS 14.5 or later to resolve the issue. For iPadOS versions prior to 14.5, update to iPadOS 14.5 or later to resolve the issue.

A malicious application may disclose restricted memory due to an issue that has been addressed with improved checks.