Felix Groebert

The issue arises from the use of an external formatting tool during code generation, potentially exposing the system to command injection.

The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted Pages document.

The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted document.

The issue allows remote attackers to have an unspecified impact by exploiting a heap out of bounds condition through crafted files, specifically Yoda's crypter or mew packer files.

The issue allows remote attackers to cause a denial of service, resulting in a crash, by utilizing a crafted petite packer file. This is related to an incorrect compiler optimization.

The issue allows remote attackers to have an unspecified impact via a crafted upx packer file. This is related to a heap out of bounds condition.

The issue is related to the `xmlParserHandlePEReference` function in `parser.c` in libxml2, which loads external parameter entities regardless of whether entity substitution or validation is enabled. This allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document. The vulnerability can be exploited remotely and may lead to disruption of confidentiality, integrity, and availability of protected information.

The issue allows physically proximate attackers to obtain sensitive FaceTime contact information by using the lock screen for an invalid FaceTime call.

The issue allows remote attackers to execute arbitrary code or cause a denial of service via crafted JPEG2000 data in a PDF document. This is due to a buffer overflow in ImageIO.

The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted Microsoft Office document.

The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted Type 1 font embedded in a document.

The issue allows remote attackers to execute arbitrary code or cause a denial of service, specifically an application crash, by providing crafted JPEG2000 data in a PDF document. This is due to a buffer overflow in ImageIO.

The issue allows remote attackers to execute arbitrary code or cause a denial of service, specifically an application crash, by providing crafted JBIG2 data in a PDF document. This is due to a buffer overflow in CoreGraphics.

The issue is related to an integer underflow in the `cli scanpe` function, which can be triggered by a skewed offset larger than the size of the PE section in a UPX packed executable. This can cause a denial of service, resulting in a crash due to an out-of-bounds read.

The issue allows remote attackers to execute arbitrary SQL commands via the `username` field to the login script, potentially leading to unauthorized access or data manipulation.