Francisco Alonso

The issue is related to a use-after-free problem in the WebKit component, which can be exploited by a remote attacker to execute arbitrary code using a specially crafted link. Processing web content may lead to arbitrary code execution. The estimated number of potentially affected devices worldwide is not specified.

The issue is related to an out of bounds memory access in the CSS component of Google Chrome, allowing a remote attacker to perform an out of bounds memory read via a crafted HTML page. This could potentially impact the confidentiality, integrity, and availability of protected information.

A use-after-free issue was addressed with improved memory management. Processing web content may lead to arbitrary code execution. This issue is related to the WebKitGTK and WPE WebKit modules, which are used for displaying web pages. The exploitation of this issue may allow a remote attacker to execute arbitrary code.

The issue is related to a buffer overflow in the WebKitGTK and WPE WebKit modules, which can lead to arbitrary code execution when processing web content. This can be exploited by a remote attacker. The estimated number of potentially affected devices is not specified.

The issue is caused by a buffer overflow in the WebKit component, allowing a remote attacker to execute arbitrary code. Processing web content may lead to arbitrary code execution. The issue was addressed with improved memory handling.

The issue is related to a buffer overflow in memory, which may allow a remote attacker to execute arbitrary code when processing web content. Improved memory handling has been implemented to address this issue.

A use after free issue was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution. The issue is related to the use of memory after it has been freed when handling web content, which can be exploited by a remote attacker to execute arbitrary code.

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 14.0.3 macOS Big Sur versions prior to 11.2 Security Update versions prior to 2021-001 Catalina Security Update versions prior to 2021-001 Mojave tvOS versions prior to 14.4 watchOS versions prior to 7.3 iOS versions prior to 14.4 iPadOS versions prior to 14.4 Description: A use after free issue was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution. The issue is related to the WebKitGTK module, which is used for displaying web pages in Apple Safari and various Apple operating systems, including Mac OS, iOS, iPadOS, watchOS, and tvOS. Recommendations: For macOS Big Sur, update to version 11.2 or later. For Security Update Catalina, apply Security Update 2021-001 or later. For Security Update Mojave, apply Security Update 2021-001 or later. For tvOS, update to version 14.4 or later. For watchOS, update to version 7.3 or later. For iOS, update to version 14.4 or later. For iPadOS, update to version 14.4 or later. For Safari, update to version 14.0.3 or later.

The issue is related to a use-after-free flaw in the nsDocShell destructor, which can be triggered under certain conditions. This can lead to a race condition, causing the use-after-free. There have been targeted attacks in the wild exploiting this flaw. The exploitation of this issue may allow a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.

The issue is related to a use-after-free condition in the ReadableStream component, potentially allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. There have been targeted attacks in the wild exploiting this flaw.

The issue is related to an out-of-bounds read in the do core note function of the File utility, specifically in the readelf.c file within libmagic.a. This can lead to a denial of service. The problem arises from the misuse of memcpy, causing the function to read data beyond the boundaries of a buffer in memory.

The issue allows remote attackers to conduct content-spoofing attacks. This is achieved via the `Swfile` parameter.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `Swfile` parameter. This can lead to the execution of malicious code on the client-side.

The issue is related to infinite recursion in wddx, allowing attackers to have an unspecified impact. The exact vectors used for the attack are unknown.

The issue is related to out-of-bounds write in certain functions, specifically `mb detect encoding`, `mb send mail`, and `mb detect order`, which can allow attackers to have an unspecified impact. The exact vectors used for the attack are unknown.

The issue is related to an integer overflow in the bcmath component, which can trigger a buffer overflow. This allows attackers to have an unspecified impact via unknown vectors.

The issue is related to an integer overflow in the StringUtil::implode function. This allows attackers to have an unspecified impact via unknown vectors.

The issue is related to self recursion in compact, allowing attackers to have an unspecified impact. The exact vectors used for the attack are unknown.

The issue is related to the array * recursive functions in HHVM, which allows attackers to have an unspecified impact. The attack vector is unknown and is related to recursion.

The issue is related to a buffer overflow in the `mconvert` function in `softmagic.c` in the `file` component, which is used in PHP. This allows remote attackers to cause a denial of service (application crash) via a crafted Pascal string in a `FILE PSTRING` conversion. The vulnerability can be exploited remotely, potentially leading to disruption of protected information.