Alex Radocea

A race condition occurs when the system attempts to perform two or more operations at the same time, but because of the nature of the device, the operations must be done in the correct sequence to be done correctly. This issue may allow an app to access sensitive user data.

A buffer overflow, which occurs when data exceeds the allocated memory boundary, was addressed with improved bounds checking. A remote attacker may be able to cause unexpected system termination.

A use-after-free issue—a memory corruption flaw where a program continues to use a pointer after it has been freed—exists in the Wi-Fi component. This flaw is pre-authentication and requires no user interaction. An attacker in a privileged network position can exploit this by sending crafted Wi-Fi packets to cause a denial-of-service attack.

A race condition occurs when the timing or sequence of events is not properly controlled, which could allow an app to access sensitive user data. This issue was addressed by implementing additional validation.

The issue involves inadequate permissions checking, potentially allowing a local attacker to access a user's Keychain items.

An issue exists where a local attacker can modify the state of the Keychain. This is caused by insufficient input validation. Additionally, malware on macOS may be able to bypass entitlements and encryption to dump iCloud passkeys and passwords without requiring elevated privileges.

A sandboxed application may be able to observe system-wide network connections due to insufficient restrictions.

The issue allows a heap-based buffer underflow and memory corruption in cron/entry.c. This was introduced during a May 2023 refactoring.

The issue is related to initialization problems in the p2putil.c component of the iNet wireless daemon (IWD), which can cause a denial of service (daemon crash) or possibly have other unspecified impacts when parsing of advertised service information fails. This can be exploited by a remote attacker. The vulnerability is particularly powerful as it can lead to information leaks, helping to bypass ASLR and other hardening measures. The problem occurs in the extract p2p advertised service info() function, where errors in processing can result in a double-free condition.

The issue involves the Keychain component and is related to the lack of protection for service data. It may allow a remote attacker to cause a denial of service or have other impacts on the system. The problem can be exploited by man-in-the-middle attackers to bypass an iCloud Keychain secret protection mechanism by leveraging the lack of authentication for OTR packets.