Dr3Dd

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 26.5.2 iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** A use-after-free issue exists where processing maliciously crafted web content may lead to an unexpected Safari crash. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed. **Recommendations** Update Safari to version 26.5.2. Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 26.5.2 iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** An out-of-bounds access issue occurs when processing maliciously crafted web content, which may lead to an unexpected Safari crash. This was addressed by implementing improved bounds checking. **Recommendations** Update Safari to version 26.5.2. Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 26.5.2 iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, was addressed with improved memory management. A malicious web extension may be able to exploit this to cause an unexpected process crash. **Recommendations** Update Safari to version 26.5.2. Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 26.5.2 iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** A type confusion issue occurs when the software fails to distinguish between different data types, which can be triggered by processing maliciously crafted web content. This may lead to memory corruption. **Recommendations** Update Safari to version 26.5.2. Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 26.5.2 iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, can lead to memory corruption. This can be triggered when the system processes maliciously crafted web content. **Recommendations** Update Safari to version 26.5.2. Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 26.5 iPadOS versions prior to 26.5 macOS Tahoe versions prior to 26.5 visionOS versions prior to 26.5 **Description** Processing maliciously crafted web content may lead to an unexpected process crash due to improper memory handling. **Recommendations** Update iOS to version 26.5. Update iPadOS to version 26.5. Update macOS Tahoe to version 26.5. Update visionOS to version 26.5.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to macOS Tahoe 26.5 **Description** A use-after-free issue, which occurs when a program continues to use a memory address after it has been freed, was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected Safari crash. **Recommendations** Update to macOS Tahoe 26.5.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 26.5 iOS versions prior to 18.7.10 iOS versions prior to 26.5 iPadOS versions prior to 18.7.10 iPadOS versions prior to 26.5 macOS Tahoe versions prior to 26.5 tvOS versions prior to 26.5 visionOS versions prior to 26.5 watchOS versions prior to 26.5 **Description** A use-after-free issue exists due to improper memory management. This occurs when the software continues to use a pointer after the memory it points to has been freed. Processing maliciously crafted web content may lead to an unexpected Safari crash. **Recommendations** Update Safari to version 26.5 Update iOS to version 18.7.10 or 26.5 Update iPadOS to version 18.7.10 or 26.5 Update macOS Tahoe to version 26.5 Update tvOS to version 26.5 Update visionOS to version 26.5 Update watchOS to version 26.5

**Name of the Vulnerable Software and Affected Versions** GPAC version 0.8.0 **Description** The issue is related to a heap-based buffer overflow in the `gf m2ts section complete` function in `media tools/mpegts.c`, which can cause a denial of service (DOS) via a crafted MP4 file. This can be exploited by a remote attacker to disrupt service. **Recommendations** For GPAC version 0.8.0, consider disabling the `gf m2ts section complete` function in `media tools/mpegts.c` as a temporary workaround to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GPAC version 0.8 **Description** The issue is related to the gf dash segmenter probe input function in the MP4Box command, which allows attackers to cause a denial of service due to a NULL pointer dereference. This can be achieved by using a crafted file. The exploitation of this issue enables a remote attacker to disrupt service. **Recommendations** For GPAC version 0.8, consider disabling the gf dash segmenter probe input function as a temporary workaround until a patch is available. Restrict access to the MP4Box command to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.