Juwei Lin

The issue involves an out-of-bounds read that can be addressed with improved bounds checking. This allows an application to potentially read restricted memory, which could lead to information disclosure.

A memory corruption issue was addressed with improved input validation, allowing an application to potentially execute arbitrary code with kernel privileges.

A memory corruption issue was addressed with improved state management. The issue is related to a Use-After-Free Privilege Escalation Vulnerability in Apple macOS.

A logic issue was addressed with improved restrictions.

A memory initialization issue was addressed with improved memory handling.

A memory corruption issue was addressed with improved memory handling.

The issue involves the `ImageIO` component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted PDF file. This is due to an out-of-bounds write and application crash. The exploitation of this issue can lead to the execution of arbitrary code or a denial of service.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption via a crafted app.

The issue is related to a denial of service caused by a NULL pointer dereference in the Audio component of Apple OS X. Additionally, there are reports of vulnerabilities in the login window and other components, including buffer overflows, insufficient input validation, and errors in memory initialization, which could allow an attacker to elevate privileges, execute arbitrary code, or cause a denial of service. The vulnerabilities can be exploited locally or remotely using specially crafted applications or files.

The issue allows local users to obtain sensitive kernel memory-layout information or cause a denial of service via unspecified vectors, potentially related to a use-after-free privilege escalation vulnerability in the DspFuncLib component.

The issue allows local users to gain privileges or cause a denial of service due to memory corruption via a crafted file. It is related to a use-after-free privilege escalation vulnerability in the DspFuncLib component.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. It is caused by a buffer overflow in the Audio component of the Mac OS X operating system. Exploitation of the issue may allow a remote attacker to execute arbitrary code in a privileged context or cause a denial of service.

The issue is caused by a buffer overflow in the IOAcceleratorFamily component of iOS and Mac OS X operating systems. This can be exploited by a remote attacker to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) using a specially crafted application.

The issue is related to errors in pointer dereferencing, which can be exploited by an attacker to cause a denial of service (NULL pointer dereference) via a crafted app. This can be achieved by a remote attacker using a specially created application.

The issue is caused by a buffer overflow in the Intel Graphics Driver component, allowing attackers to execute arbitrary code in a privileged context via a crafted app. This can be exploited by a remote attacker using a specially created application.

The issue is related to a component in the Audio system of the operating system, which is affected by pointer dereference errors. This can be exploited by a remote attacker using a specially crafted application to cause a denial of service, specifically a NULL pointer dereference.

The issue is related to a use-after-free vulnerability in the kernel, allowing attackers to execute arbitrary code in a privileged context via a crafted app. This can be exploited by a remote attacker using a specially created application, potentially leading to the execution of arbitrary code.

The issue allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app. It is related to the lack of protection for service data in the kernel of the operating systems. Exploitation of the issue may allow a remote attacker to access protected information or cause a denial of service.

The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. It is caused by a buffer overflow in the IOGraphics component of the Mac OS X operating system. Exploitation of the issue may permit a remote attacker to execute arbitrary code in a privileged context or cause a denial of service.

The issue is caused by a buffer overflow in the IOUSBFamily component, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. This can be exploited by a remote attacker using a specially crafted application.