Jz

Um aplicativo pode conseguir escapar de seu contêiner de segurança designado, conhecido como sandbox. O problema foi resolvido por meio de entitlements aprimorados.

Um problema de validação de entrada foi corrigido mediante a remoção do código vulnerável.

The issue was addressed with improved bounds checks. Processing a maliciously crafted image may lead to heap corruption.

The issue is caused by a buffer overflow in the ImageIO component, which may allow a remote attacker to disclose protected information. Processing an image may result in the disclosure of process memory. The issue was addressed with improved memory handling.

The issue is related to a local privilege escalation, where a malicious actor with read/write access to the host operating system can gain root access. This is due to insecure privilege management in the Raw Disk Handler component of the VMware Fusion hypervisor.