Chris Bailey

An authorization issue exists where improved access control is required to prevent an app from potentially accessing sensitive user data.

An authorization issue exists due to improper state management, which could allow an application to access sensitive user data.

A null pointer dereference occurs due to insufficient validation. An attacker in physical proximity may exploit this to cause a denial-of-service, which is a condition where the system becomes unavailable or crashes.

A null pointer dereference was addressed with improved validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2. An attacker in physical proximity may be able to cause a denial-of-service.

A memory corruption issue exists where parsing a file can lead to unexpected application termination or arbitrary code execution. This is caused by improper memory handling.

A permissions issue exists where an application may be able to access sensitive user data. This may allow the reading of most of the `/usr/libexec` directory.

The issue is related to the `UserAttributeSimilarityValidator` component in the Django framework, which can cause significant overhead when evaluating a large submitted password. This can lead to a potential denial-of-service attack if access to user registration is unrestricted. The vulnerability is related to an error in resource management, allowing a remote attacker to execute a denial-of-service attack by sending a specially crafted password to the application.