Hikerell

An application may be able to escape its designated security container. The issue involves insufficient validation of symbolic links.

An application may be able to access protected user data due to vulnerable code. The vulnerable code has been removed in the fixed versions.

A privacy issue was addressed by removing the vulnerable code. A sandboxed process may be able to circumvent sandbox restrictions.

The issue allows a malicious app to access private information due to improper handling of symlinks.