Calysteon

A resource exhaustion issue exists due to insufficient input validation. A remote attacker could exploit this to cause a denial-of-service, which is a condition where a system becomes unavailable to its intended users.

An out-of-bounds write issue exists where a remote attacker could cause heap corruption or unexpected application termination. This occurs when data is written outside the intended memory boundary of a buffer, potentially corrupting adjacent memory. The issue was addressed by implementing improved bounds checking.

An out-of-bounds read occurs when the software reads data outside the intended boundary of a buffer. Processing a maliciously crafted file may lead to unexpected app termination.

A denial-of-service issue exists due to insufficient input validation. An attacker positioned in a privileged network location could exploit this to cause a system crash or unavailability.

An out-of-bounds read occurs due to insufficient bounds checking. An attacker within radio range can exploit this to cause unexpected system termination.

A race condition occurs due to insufficient locking, which may allow an application to cause unexpected system termination or corrupt process memory. A race condition is a situation where the system's substantive behavior is dependent on the sequence or timing of other uncontrollable events.

An out-of-bounds write issue exists where mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory. This occurs due to insufficient bounds checking, which is a process of verifying that a program does not access memory outside the boundaries of a predefined buffer.

An out-of-bounds write issue exists where an application can write data past the end of a defined memory buffer. This can lead to kernel memory corruption or unexpected system termination.

An out-of-bounds read occurs due to insufficient bounds checking. Processing a maliciously crafted file may lead to unexpected app termination. An out-of-bounds read is a condition where a program reads data past the end of the intended buffer, potentially accessing restricted memory.

A stack overflow occurs due to insufficient input validation. Processing a maliciously crafted message can lead to a denial-of-service, which is a condition where the system becomes unavailable to its intended users.

An integer overflow was addressed with improved input validation. This issue is fixed in visionOS 27.2. Processing a maliciously crafted 3D model may lead to memory corruption.

An out-of-bounds read occurs due to insufficient bounds checking. This flaw allows a remote attacker to cause a denial-of-service or disclose process memory. An out-of-bounds read is a condition where a program reads data past the end or before the beginning of the intended buffer.

A double free issue exists due to improper memory management. A double free occurs when the system attempts to free the same memory location twice, which can lead to memory corruption. An attacker on the local network may exploit this to cause unexpected system termination or corrupt process memory.

An out-of-bounds write issue occurs when processing a maliciously crafted 3D model, which may lead to memory corruption. This is caused by insufficient bounds checking during the processing of the model data.

An integer overflow occurs due to insufficient input validation. Connecting to a malicious VNC server may cause a denial-of-service, which is a condition where the system becomes unavailable to its intended users.

A buffer overflow occurs due to insufficient bounds checking, which may allow a remote attacker to cause unexpected application termination. A buffer overflow is a condition where a program writes more data to a block of memory than it can hold, potentially overwriting adjacent memory.

An out-of-bounds read occurs due to insufficient bounds checking, which may allow an application to cause unexpected system termination. An out-of-bounds read is a condition where a program reads data past the end or before the beginning of the intended buffer.

An out-of-bounds read occurs due to insufficient bounds checking. Processing a maliciously crafted file may lead to unexpected app termination.

Exposure of sensitive system information to an unauthorized control sphere allows an authorized attacker to disclose information locally.

An application may be able to disclose kernel memory due to improper memory handling.