Tielei Wang

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.5 iPadOS versions prior to 14.5 Description: The issue is related to an out-of-bounds read that has been addressed with improved input validation. A local user may be able to read kernel memory. Recommendations: For iOS versions prior to 14.5, update to iOS 14.5 or later. For iPadOS versions prior to 14.5, update to iPadOS 14.5 or later.

An out-of-bounds read issue was addressed with improved bounds checking, which may allow a malicious application to execute arbitrary code with kernel privileges.

An out-of-bounds write issue was addressed with improved bounds checking, allowing a malicious application to potentially execute arbitrary code with kernel privileges.

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.3 Description: A type confusion issue was addressed with improved state handling, which may allow an application to execute arbitrary code with kernel privileges. Recommendations: For versions prior to 11.3, update to macOS Big Sur 11.3 to resolve the issue.

A use after free issue was addressed with improved memory management, which may allow an application to execute arbitrary code with kernel privileges.

The issue is related to an out-of-bounds read that has been addressed with improved bounds checking. A malicious application may be able to determine kernel memory layout.

A memory corruption issue was addressed with improved state management. This issue allows an application to potentially execute arbitrary code with kernel privileges.

An information disclosure issue was addressed by removing the vulnerable code. A malicious application may be able to determine another application's memory layout.

A memory corruption issue was addressed with improved state management. This issue may allow an application to cause unexpected system termination or write kernel memory.

An information disclosure issue was addressed with improved state management, allowing a local user to potentially read kernel memory.

A logic issue resulted in memory corruption, potentially allowing a malicious application to execute arbitrary code with kernel privileges. This issue was addressed with improved state management.

A memory corruption issue was addressed with improved state management. A malicious application may be able to execute arbitrary code with kernel privileges.

A memory corruption issue was addressed with improved state management, allowing an application to potentially execute arbitrary code with kernel privileges.

The issue is related to an integer overflow that has been addressed through improved input validation. A malicious application may be able to execute arbitrary code with kernel privileges.

A memory corruption issue was addressed with improved input validation. A remote attacker may be able to cause arbitrary code execution.

The issue is related to the ReverbConvolverStage function in the Web Audio implementation in Blink. It allows remote attackers to cause a denial of service due to an out-of-bounds read via vectors related to the `impulseResponse` array.

The issue concerns the Telephony subsystem, which does not enforce API conformity for access to telephony-daemon interfaces. This allows attackers to bypass intended restrictions on phone calls by using a crafted app that sends direct requests to the daemon.

The issue is related to errors in number processing in the vclmi.dll component of the OpenOffice.org module in LibreOffice. Exploitation of this issue may allow a remote attacker to gain unauthorized access to confidential data, cause a denial of service, or impact data integrity through a specially crafted DOC file using a JPEG image. This can trigger a heap-based buffer overflow, potentially allowing the execution of arbitrary code.

The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted pathname for a file.

A buffer overflow issue allows remote attackers to execute arbitrary code via a crafted image file.