Simon Huang

**Nome do software vulnerável e versões afetadas** Versões do Apple iOS anteriores à 15.1 Versões do Apple iPadOS anteriores à 15.1 Versões do Apple macOS anteriores à 12.0.1 Versões do Apple tvOS anteriores à 15.1 Versões do Apple watchOS anteriores à 8.1 Versões do Apple macOS Catalina anteriores à Atualização de Segurança 2021-007 Versões do Apple macOS Big Sur anteriores à 11.6.1 **Descrição** Um problema de validação de entrada foi corrigido com o aprimoramento do gerenciamento de memória. Descompactar um arquivo criado de forma maliciosa pode levar à execução de código arbitrário. **Recomendações** Para versões do iOS anteriores à 15.1, atualize para o iOS 15.1 ou posterior. Para versões do iPadOS anteriores à 15.1, atualize para o iPadOS 15.1 ou posterior. Para versões do macOS Monterey anteriores à 12.0.1, atualize para o macOS Monterey 12.0.1 ou posterior. Para versões do tvOS anteriores à 15.1, atualize para o tvOS 15.1 ou posterior. Para versões do watchOS anteriores à 8.1, atualize para o watchOS 8.1 ou posterior. Para o macOS Catalina, aplique a Atualização de Segurança 2021-007 ou posterior. Para versões do macOS Big Sur anteriores à 11.6.1, atualize para o macOS Big Sur 11.6.1 ou posterior.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.15 **Description** A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges. **Recommendations** For versions prior to 10.15, update to macOS Catalina 10.15 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** NVIDIA Graphics Drivers versions prior to 10.12.5 **Description** The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) using a specially crafted application. **Recommendations** For versions prior to 10.12.5, update to version 10.12.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.12.4 **Description** The issue involves the `QuickTime` component and allows remote attackers to execute arbitrary code or cause a denial of service, including memory corruption and application crash, via a crafted media file. This is due to a buffer overflow on the stack. **Recommendations** For macOS versions prior to 10.12.4, update to version 10.12.4 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the `QuickTime` component until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.12.1 **Description** The issue involves the `ATS` component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted font. This is caused by a buffer overflow in memory. **Recommendations** For macOS versions prior to 10.12.1, update to version 10.12.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `ATS` component until a patch is available. Avoid using crafted fonts in affected systems to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 10.1 macOS versions prior to 10.12.1 tvOS versions prior to 10.0.1 watchOS versions prior to 3.1.3 **Description** The issue involves the `FontParser` component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted font, resulting in a buffer overflow and application crash. **Recommendations** For iOS versions prior to 10.1, update to version 10.1 or later. For macOS versions prior to 10.12.1, update to version 10.12.1 or later. For tvOS versions prior to 10.0.1, update to version 10.0.1 or later. For watchOS versions prior to 3.1.3, update to version 3.1.3 or later.