Kaitao Xie

An integer overflow issue was identified and addressed by implementing 64-bit timestamps. This could allow an application to gain root privileges. The issue affects multiple Apple operating systems. The vulnerability was discovered by Kaitao Xie and Xiaolong Bai of Alibaba Group.

A use-after-free issue was addressed with improved memory management, which may allow an app to execute arbitrary code with kernel privileges. The issue is related to memory management and can be exploited to gain kernel privileges.