Ivan Fratric

O processamento de um convite de calendário maliciosamente criado pode levar à corrupção de memória devido a um problema de gravação fora dos limites (out-of-bounds write), que ocorre quando os dados são gravados fora do limite de memória pretendido.

Existe um problema de confusão de tipos na biblioteca libxslt devido à reutilização do mesmo campo de memória, `psvi`, tanto para a folha de estilo quanto para os dados de entrada durante transformações XML. Isso pode resultar em falhas na aplicação, corrupção de memória, negação de serviço ou comportamento inesperado.

Foi identificada uma vulnerabilidade na qual o processamento de XPath poderia desencadear comportamento indefinido devido à falta de verificações de nulo durante o acesso a atributos. Isso poderia resultar em acesso de leitura fora dos limites e, potencialmente, em corrupção de memória.

O problema permite que um site malicioso exfiltre dados entre origens. Isso foi corrigido com verificações aprimoradas.

O problema está relacionado a um erro de use-after-free no XSLTProcessor ao executar código JavaScript durante a transformação de um documento. Isso poderia permitir que um atacante remoto comprometesse um sistema vulnerável. O número estimado de dispositivos potencialmente afetados em todo o mundo não foi fornecido. Não há informações sobre incidentes reais onde este problema foi explorado.

O problema está relacionado a um comparador inconsistente em xslt/txNodeSorter, potencialmente levando a acesso fora dos limites.

An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. The issue arises from the failure to reset the `mCompileResult` in the `txMozillaXSLTProcessor::ImportStylesheet`, resulting in a stale error state that persists, causing subsequent transformations to use freed memory and leading to a use-after-free condition.

O problema foi resolvido com verificações de limites aprimoradas. A análise de um arquivo de vídeo criado de forma maliciosa pode levar ao encerramento inesperado do sistema.

O problema foi resolvido com verificações de limites aprimoradas. A análise de um arquivo de vídeo criado de forma maliciosa pode levar ao encerramento inesperado do sistema.

O problema está relacionado à análise de um arquivo de vídeo criado de forma maliciosa, o que pode levar ao encerramento inesperado do sistema. Ele foi corrigido com verificações de limites aprimoradas.

The issue is related to a buffer overflow in the AppleVA component of the macOS operating system, which can lead to arbitrary code execution when processing an image. This is due to improper memory handling.

The issue involves multiple memory corruption problems that have been resolved through enhanced input validation. Processing a maliciously crafted file can lead to unexpected application termination or arbitrary code execution.

The issue is related to multiple memory corruption problems that have been addressed through improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. The vulnerability is also associated with a buffer overflow in the AppleGraphicsControl component, which could allow a remote attacker to execute arbitrary code using a specially crafted file.

The issue is related to multiple memory corruption problems that have been addressed through improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. The vulnerability is also associated with a buffer overflow in the AppleGraphicsControl component, which can allow an attacker to execute arbitrary code using a specially crafted file.

The issue is related to multiple memory corruption problems that have been addressed through improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. The vulnerability is also associated with a buffer overflow in the AppleGraphicsControl component, which can allow an attacker to execute arbitrary code using a specially crafted file.

The issue is related to a buffer overflow in the AppleGraphicsControl component of the macOS Sonoma operating system. It may allow an attacker to execute arbitrary code using a specially crafted file. The problem is associated with memory corruption issues, which can be triggered by processing a maliciously crafted file, potentially leading to unexpected app termination or arbitrary code execution.

The issue is related to a buffer overflow in the AppleVA component of the macOS operating system, which can lead to unexpected app termination or arbitrary code execution when processing a file. This is due to improper memory handling.

The issue is related to a buffer overflow in the AppleGraphicsControl component of the macOS operating system. It may allow an attacker to execute arbitrary code using a specially crafted file. The problem is associated with multiple memory corruption issues, which have been addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

The issue is related to a buffer overflow in the AppleGraphicsControl component of the macOS operating system. It may allow an attacker to execute arbitrary code using a specially crafted file. The problem is caused by multiple memory corruption issues, which have been addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

The issue is related to a buffer overflow in the AppleGraphicsControl component of the macOS operating system. It may allow an attacker to execute arbitrary code using a specially crafted file. The problem is caused by multiple memory corruption issues, which have been addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.