Amir Bazine

An out-of-bounds write issue was addressed with improved input validation. Processing a maliciously crafted video file may lead to unexpected app termination.

The issue is related to an out-of-bounds access problem that has been addressed with improved bounds checking. Processing a maliciously crafted file may lead to unexpected app termination. It is also described as a potential data exposure risk due to an out-of-bounds read vulnerability in the File Handler component.

The issue was addressed with improved memory handling. Processing a file may lead to unexpected app termination or arbitrary code execution.

An out-of-bounds write issue was addressed with improved input validation. Processing a file may lead to unexpected app termination or arbitrary code execution.

The issue is related to a buffer overflow in the ImageIO component of Apple operating systems, which can be exploited by a remote attacker using a specially crafted image file, potentially leading to arbitrary code execution. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.

The issue was addressed with improved memory handling. Processing a file may lead to a denial-of-service or potentially disclose memory contents.

The issue was addressed with improved memory handling. Processing a file may lead to a denial-of-service or potentially disclose memory contents.

An out-of-bounds read issue was addressed with improved input validation. Processing an image may lead to arbitrary code execution.

This issue is an elevation-of-privilege vulnerability affecting the Windows Common Log File System Driver. Successful exploitation could allow attackers to affect the system and potentially gain elevated privileges. The Vanilla Tempest cybercrime gang has been observed using this vulnerability in conjunction with INC ransomware. The vulnerability is related to errors in privilege management within the driver. It was reported by CrowdStrike and the NSA. Multiple sources indicate the vulnerability is being actively exploited by ransomware operators.

The issue is related to a stack-based buffer over-read in the `file copystr` function in `funcs.c`, which can lead to a denial of service when a specially crafted file is used. This can be exploited by an attacker to cause service disruption.