Hanqing Zhao

**Name of the Vulnerable Software and Affected Versions** QEMU version 4.2.0 **Description** The issue is related to an out-of-bounds access in the PCI configuration space and a buffer overflow in the ati mm read function. This could allow an attacker to cause a denial of service. **Recommendations** For QEMU version 4.2.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** QEMU version 4.2.0 **Description** The issue is related to a buffer data boundary operation overflow in QEMU, which can be exploited to access confidential data, compromise data integrity, and cause a denial of service. Specifically, the `hw/pci/msix.c` file in QEMU allows guest OS users to trigger an out-of-bounds access via a crafted address in an msi-x mmio operation. **Recommendations** For QEMU version 4.2.0, consider restricting access to the `hw/pci/msix.c` file or the msi-x mmio operation to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** QEMU versions 5.0.0 and earlier QEMU versions 4.2.0 **Description** The issue is related to an out-of-bounds read in the `megasas lookup frame` function in `hw/scsi/megasas.c`. This can be triggered via a crafted `reply queue head` field from a guest OS user, potentially leading to a denial of service. **Recommendations** For QEMU versions 5.0.0 and earlier, update to a version later than 5.0.0 to resolve the issue. For QEMU version 4.2.0, update to a version later than 4.2.0 to resolve the issue. As a temporary workaround, consider restricting access to the `megasas lookup frame` function in `hw/scsi/megasas.c` to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** QEMU versions 4.2.0 through 5.0.0 **Description** The issue is related to a buffer data boundary operation overflow. It allows an attacker to compromise data integrity and cause a denial of service. The problem lies in the `es1370 transfer audio` function in `hw/audio/es1370.c`, which does not properly validate the frame count. This allows guest OS users to trigger an out-of-bounds access during an `es1370 write()` operation. **Recommendations** For QEMU versions 4.2.0 through 5.0.0, consider disabling the `es1370 transfer audio` function until a patch is available to prevent out-of-bounds access during `es1370 write()` operations. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** QEMU version 4.2.0 **Description** The issue is related to the ati-vga component in the QEMU hardware emulator, which is vulnerable to uncontrolled recursion. This can be triggered by a crafted mm index value during an ati mm read or ati mm write call, potentially allowing an attacker to cause a denial of service. **Recommendations** For QEMU version 4.2.0, as a temporary workaround, consider disabling the ati-vga component to minimize the risk of exploitation. Restrict access to the `ati mm read` and `ati mm write` functions until a patch is available. Avoid using the `mm index` variable in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 12.3 macOS Mojave versions prior to 10.14.5 tvOS versions prior to 12.3 Safari versions prior to 12.1.1 iTunes for Windows versions prior to 12.9.5 iCloud for Windows versions prior to 7.12 **Description** The issue arises from multiple memory corruption problems that have been resolved through enhanced memory handling. Processing maliciously crafted web content may lead to arbitrary code execution. **Recommendations** Update to iOS 12.3 or later. Update to macOS Mojave 10.14.5 or later. Update to tvOS 12.3 or later. Update to Safari 12.1.1 or later. Update to iTunes for Windows 12.9.5 or later. Update to iCloud for Windows 7.12 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 12.2 tvOS versions prior to 12.2 Safari versions prior to 12.1 iTunes for Windows versions prior to 12.9.4 **Description** A memory corruption issue was addressed with improved validation, which could allow a sandboxed process to circumvent sandbox restrictions. **Recommendations** For iOS versions prior to 12.2, update to iOS 12.2 or later. For tvOS versions prior to 12.2, update to tvOS 12.2 or later. For Safari versions prior to 12.1, update to Safari 12.1 or later. For iTunes for Windows versions prior to 12.9.4, update to iTunes 12.9.4 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 12.3 macOS Mojave versions prior to 10.14.5 tvOS versions prior to 12.3 Safari versions prior to 12.1.1 iTunes for Windows versions prior to 12.9.5 iCloud for Windows versions prior to 7.12 **Description** The issue is related to multiple memory corruption problems, which can be exploited by processing maliciously crafted web content, potentially leading to arbitrary code execution. Exploitation of these issues may allow a remote attacker to execute arbitrary code using a specially crafted website. The estimated number of potentially affected devices worldwide is not specified. **Recommendations** For iOS versions prior to 12.3, update to iOS 12.3 or later. For macOS Mojave versions prior to 10.14.5, update to macOS Mojave 10.14.5 or later. For tvOS versions prior to 12.3, update to tvOS 12.3 or later. For Safari versions prior to 12.1.1, update to Safari 12.1.1 or later. For iTunes for Windows versions prior to 12.9.5, update to iTunes for Windows 12.9.5 or later. For iCloud for Windows versions prior to 7.12, update to iCloud for Windows 7.12 or later.

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.14.2 Description: A memory corruption issue was addressed with improved memory handling. Recommendations: For versions prior to 10.14.2, update to macOS Mojave 10.14.2 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.14.2 Description: A memory corruption issue was addressed with improved memory handling. Recommendations: For versions prior to 10.14.2, update to macOS Mojave 10.14.2 or later to resolve the issue.