Dave G

An out-of-bounds read occurs due to insufficient bounds checking, which may allow an application to cause unexpected system termination. An out-of-bounds read is a condition where a program reads data past the end or before the beginning of the intended buffer.

An application may be able to disclose kernel memory, which is the protected memory area used by the operating system core to manage hardware and system processes.

An out-of-bounds read occurs when connecting to a malicious SMB server, which may lead to unexpected system termination. This issue was addressed by implementing improved bounds checking. An out-of-bounds read is a condition where a program reads data past the end or before the beginning of the intended buffer.

A buffer overflow occurs due to insufficient bounds checking. A remote attacker could exploit this to cause unexpected system termination or corrupt kernel memory. A buffer overflow is a condition where a process writes more data to a block of memory than it can hold, potentially overwriting adjacent memory locations.

A buffer overflow, which occurs when data exceeds the allocated memory boundary, was identified. This issue may allow an app to cause unexpected system termination.

A buffer overflow, which occurs when a program writes more data to a memory buffer than it can hold, was addressed with improved bounds checking. An app may be able to cause unexpected system termination or write kernel memory.

A buffer overflow, which occurs when data exceeds the allocated memory boundary, was addressed with improved bounds checking. A remote attacker may be able to cause unexpected system termination.

A buffer overflow occurs due to insufficient bounds checking. This flaw allows an application to write to kernel memory or cause unexpected system termination. A buffer overflow is a condition where a program writes more data to a block of memory than it can hold, potentially overwriting adjacent memory locations.

A use after free issue existed due to improper memory management. This could allow an application to cause unexpected system termination.

A sandboxed application may be able to observe system-wide network connections due to insufficient restrictions.

The issue is related to mounting a maliciously crafted AFP network share, which may lead to system termination.

Mounting a maliciously crafted AFP network share may lead to system termination. The issue was addressed with improved checks.

An integer overflow was addressed with improved input validation. This issue allows a remote attacker to potentially leak memory.

The issue allows a heap-based buffer underflow and memory corruption in cron/entry.c. This was introduced during a May 2023 refactoring.

The issue is related to a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by sending a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument containing an AFPName type string that exceeds the length specified in the associated length field.

A buffer overflow issue in TruBlueEnvironment allows local users to gain privileges via a long environment variable.

The System Configuration subsystem in Mac OS allows local users to modify network settings.

The issue allows remote attackers to execute arbitrary code via shell metacharacters in the parse xml.cgi component.