Wenchao Li

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.1 iOS versions prior to 18.1 iPadOS versions prior to 18.1 iOS versions prior to 17.7.1 iPadOS versions prior to 17.7.1 tvOS versions prior to 18.1 macOS Sonoma versions prior to 14.7.1 watchOS versions prior to 11.1 macOS Ventura versions prior to 13.7.1 Description: A denial-of-service issue was addressed with improved input validation. A remote attacker may be able to cause a denial-of-service. Recommendations: Update to visionOS 2.1 or later. Update to iOS 18.1 or later. Update to iPadOS 18.1 or later. Update to iOS 17.7.1 or later. Update to iPadOS 17.7.1 or later. Update to tvOS 18.1 or later. Update to macOS Sonoma 14.7.1 or later. Update to watchOS 11.1 or later. Update to macOS Ventura 13.7.1 or later.

The issue is related to a Buffer Overflow vulnerability in the `ID3 Support::ID3v2Frame::getFrameValue` function. This vulnerability can be exploited by remote attackers to cause a denial of service via the opening of a crafted audio file with an ID3V2 frame. The vulnerability is associated with a buffer overflow in memory, which can be triggered by a specially crafted audio file.

The issue allows remote attackers to cause a denial of service via the opening of crafted webp files. This is due to a Buffer Overflow vulnerability in the WEBP Support.cpp file.

The issue allows an app to bypass Privacy preferences. It was addressed with improved checks.

The issue is related to insufficient warnings about dangerous actions, which may allow an attacker to bypass existing security restrictions. A shortcut may be able to use sensitive data with certain actions without prompting the user.

A logic issue was addressed with improved state management, which may allow an app to modify protected parts of the file system.

The issue allows a shortcut to use sensitive data with certain actions without prompting the user. This was addressed with additional permissions checks.

The issue is related to insecure temporary files in the Shortcuts component of macOS Ventura, which may allow an attacker to access confidential information. This privacy issue can be exploited by an app to observe unprotected user data due to improper handling of temporary files.

The issue is related to an out-of-bounds write problem, which has been addressed with improved bounds checking. Processing a maliciously crafted image may lead to arbitrary code execution. The vulnerability can be exploited by a remote attacker to execute arbitrary code.