Brandon Azad

Foi corrigido um problema de acesso com restrições de acesso aprimoradas. Um aplicativo malicioso poderia identificar quais outros aplicativos o usuário tem instalados.

Um problema de lógica foi corrigido com restrições aprimoradas. Um processo em sandbox pode ser capaz de contornar as restrições da sandbox.

Um problema de inicialização de memória foi corrigido com o aprimoramento do gerenciamento de memória. Um usuário local pode ser capaz de ler a memória do kernel.

O problema envolve uma leitura fora dos limites que foi corrigida com uma verificação de limites aprimorada. Um invasor que já tenha conseguido executar código do kernel pode ser capaz de contornar as medidas de mitigação da memória do kernel.

Foi corrigido um problema de validação com a melhoria da sanitização de entradas, o que poderia permitir que um aplicativo lesse memória restrita.

Um problema de acesso foi corrigido com o aprimoramento do gerenciamento de memória. Um aplicativo malicioso pode ser capaz de determinar o layout da memória do kernel.

Um problema de confusão de tipos foi corrigido com o aprimoramento do gerenciamento de memória. Um aplicativo malicioso pode ser capaz de executar código arbitrário com privilégios de sistema.

O problema está relacionado a uma falha de corrupção de memória no componente IOAcceleratorFamily dos sistemas operacionais da Apple, que pode ser explorada para executar código arbitrário com privilégios de kernel. Isso se deve a um estouro de buffer na memória. O número estimado de dispositivos potencialmente afetados não foi especificado.

The issue is related to an out-of-bounds read that has been addressed with improved bounds checking. A local user may be able to cause unexpected system termination or read kernel memory.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12 Description: A validation issue was addressed with improved input sanitization. Recommendations: For versions prior to iOS 12, update to iOS 12 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12 macOS versions prior to 10.14 Description: A validation issue was addressed with improved input sanitization. Recommendations: For iOS versions prior to 12, update to iOS 12 or later. For macOS versions prior to 10.14, update to macOS 10.14 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12 macOS versions prior to 10.14 tvOS versions prior to 12 watchOS versions prior to 5 Description: A memory corruption issue was addressed with improved memory handling. Recommendations: For iOS versions prior to 12, update to iOS 12 or later. For macOS versions prior to 10.14, update to macOS 10.14 or later. For tvOS versions prior to 12, update to tvOS 12 or later. For watchOS versions prior to 5, update to watchOS 5 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12 macOS versions prior to 10.14 tvOS versions prior to 12 watchOS versions prior to 5 Description: A memory corruption issue was addressed with improved memory handling. Recommendations: For iOS versions prior to 12, update to iOS 12 or later. For macOS versions prior to 10.14, update to macOS Mojave 10.14 or later. For tvOS versions prior to 12, update to tvOS 12 or later. For watchOS versions prior to 5, update to watchOS 5 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12 macOS versions prior to 10.14 tvOS versions prior to 12 watchOS versions prior to 5 Description: A memory corruption issue was addressed with improved memory handling. Recommendations: For iOS versions prior to 12, update to iOS 12 or later. For macOS versions prior to 10.14, update to macOS Mojave 10.14 or later. For tvOS versions prior to 12, update to tvOS 12 or later. For watchOS versions prior to 5, update to watchOS 5 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.1.1 macOS Mojave versions prior to 10.14.2 tvOS versions prior to 12.1.1 watchOS versions prior to 5.1.2 Description: A memory initialization issue was addressed with improved memory handling. Recommendations: For iOS versions prior to 12.1.1, update to iOS 12.1.1 or later. For macOS Mojave versions prior to 10.14.2, update to macOS Mojave 10.14.2 or later. For tvOS versions prior to 12.1.1, update to tvOS 12.1.1 or later. For watchOS versions prior to 5.1.2, update to watchOS 5.1.2 or later.

An out-of-bounds read issue was addressed through improved input validation.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12 macOS versions prior to 10.14 tvOS versions prior to 12 watchOS versions prior to 5 Description: A memory corruption issue was addressed with improved memory handling. Recommendations: For iOS versions prior to 12, update to iOS 12 or later. For macOS versions prior to 10.14, update to macOS 10.14 or later. For tvOS versions prior to 12, update to tvOS 12 or later. For watchOS versions prior to 5, update to watchOS 5 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12 macOS versions prior to 10.14 tvOS versions prior to 12 watchOS versions prior to 5 Description: A memory corruption issue was addressed with improved memory handling. Recommendations: For iOS versions prior to 12, update to iOS 12 or later. For macOS versions prior to 10.14, update to macOS Mojave 10.14 or later. For tvOS versions prior to 12, update to tvOS 12 or later. For watchOS versions prior to 5, update to watchOS 5 or later.

A memory corruption issue was addressed with improved memory handling.

A memory corruption issue was addressed with improved memory handling.