이준성

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.3 iPadOS versions prior to 18.3 Description: A logic issue was addressed with improved checks, allowing photos in the Hidden Photos Album to be viewed without authentication. Recommendations: For iOS versions prior to 18.3, update to iOS 18.3 to resolve the issue. For iPadOS versions prior to 18.3, update to iPadOS 18.3 to resolve the issue.

A use-after-free issue was addressed with improved memory management. Processing web content may lead to arbitrary code execution. The issue is related to the WebKit browser's web page display modules and is associated with the use of memory after it has been freed. Exploitation of the issue may allow a remote attacker to execute arbitrary code.

The issue is related to a buffer overflow in the WebKit browser's web page display modules, which can lead to arbitrary code execution when processing web content. This can allow a remote attacker to execute arbitrary code.

The issue was addressed with improved memory handling. Processing web content may lead to a denial-of-service.

The issue exists due to the incorrect handling of the Unicode character for text direction override in filenames. This could allow a remote attacker to conduct spoofing attacks by making an executable file appear as a document file.