Andrey Chernykh

An authorization issue exists due to improper state management, which could allow an application to access sensitive user data.

A permissions issue exists where a user with screen sharing access may be able to view another user's screen.

An out-of-bounds write issue exists where a malicious Screen Sharing peer can corrupt process memory. This occurs due to insufficient bounds checking, which is a security mechanism used to ensure that a program does not access memory outside the boundaries of a predefined buffer.

A malicious application may be able to create files in protected directories due to insufficient checks.

An access issue exists where an application may be able to break out of its sandbox. A sandbox is a security mechanism for separating running programs from one another and from the system.

An out-of-bounds write issue exists in the AppleAVE2 kernel component. This occurs when the `NumberOfTemporalLayers` variable in VideoToolbox is set to 16463, which triggers a kernel data abort during the first encode process. This flaw can lead to a kernel panic, resulting in unexpected system termination and a denial of service.

An issue exists in path handling due to insufficient validation, which could allow an application to access protected user data.