Dr3Dd

A use-after-free issue exists where processing maliciously crafted web content may lead to an unexpected Safari crash. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

An out-of-bounds access issue occurs when processing maliciously crafted web content, which may lead to an unexpected Safari crash. This was addressed by implementing improved bounds checking.

A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, was addressed with improved memory management. A malicious web extension may be able to exploit this to cause an unexpected process crash.

A type confusion issue exists in the WebKit `TransformStream` component. Type confusion occurs when a program allocates a resource as one type but accesses it as another, potentially leading to memory corruption. Processing maliciously crafted web content may allow a remote attacker to cause memory corruption, which could result in cross-site scripting, denial of service, or arbitrary code execution if a user is tricked into visiting a malicious website.

A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, can lead to memory corruption. This can be triggered when the system processes maliciously crafted web content.

Processing maliciously crafted web content may lead to an unexpected process crash due to improper memory handling.

A use-after-free issue, which occurs when a program continues to use a memory address after it has been freed, was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A use-after-free issue exists due to improper memory management. This occurs when the software continues to use a pointer after the memory it points to has been freed. Processing maliciously crafted web content may lead to an unexpected Safari crash.

The issue is related to a heap-based buffer overflow in the `gf m2ts section complete` function in `media tools/mpegts.c`, which can cause a denial of service (DOS) via a crafted MP4 file. This can be exploited by a remote attacker to disrupt service.

The issue is related to the gf dash segmenter probe input function in the MP4Box command, which allows attackers to cause a denial of service due to a NULL pointer dereference. This can be achieved by using a crafted file. The exploitation of this issue enables a remote attacker to disrupt service.