Hossein Lotfi

A type confusion issue exists in the `jsToWasm` IC Entrypoint. Processing maliciously crafted web content can lead to memory corruption and remote code execution. Type confusion occurs when a program accesses a resource using a type that is different from the type the resource was originally defined with.

The software contains a type confusion issue stemming from improper state handling when processing web content. This can lead to an unexpected crash of the application. The issue is related to the handling of the `byteLength` property within the JavaScriptCore FTL DataView component.

This issue is a buffer overflow in Apple Safari’s JavaScriptCore and WebKitGTK, stemming from improper memory handling when processing maliciously crafted web content. This can lead to an unexpected process crash. The issue was addressed by improving memory handling. There is no mention of the number of potentially affected devices or any real-world incidents where this issue was exploited.

An out-of-bounds read issue exists due to insufficient input validation when processing maliciously crafted media files. This may result in unexpected application termination or corruption of process memory.

A use-after-free issue exists due to improper memory management when processing maliciously crafted web content. This can lead to an unexpected process crash. The issue relates to the WasmFunctionParser and its handling of function signatures.

A use-after-free issue exists due to improved memory management. Processing maliciously crafted web content may lead to an unexpected Safari crash. The issue involves Array allocation sinking in DFG.

An out-of-bounds access issue existed due to insufficient bounds checking. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

The issue involves improved memory handling. Parsing a file may lead to unexpected application termination.

The issue was addressed with improved input sanitization. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

An out-of-bounds read issue was addressed with improved bounds checking. This issue may lead to disclosure of user information when parsing a file.

The issue is related to parsing a file, which may lead to an unexpected app termination. It was addressed with improved checks.

A use-after-free issue was addressed with improved memory management. Parsing a file may lead to an unexpected app termination.

The issue was addressed with improved input sanitization. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.

The issue is related to parsing a maliciously crafted file, which may lead to an unexpected app termination. It is also associated with an unlimited resource allocation vulnerability in the Sips command-line tool for editing images in macOS, allowing a remote attacker to cause a denial of service.

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.3 watchOS versions prior to 11.2 visionOS versions prior to 2.2 tvOS versions prior to 18.2 macOS Sequoia versions prior to 15.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 macOS Ventura versions prior to 13.7.2 macOS Sonoma versions prior to 14.7.2 Description: The issue was addressed with improved checks. Processing a maliciously crafted font may result in the disclosure of process memory. Recommendations: For iPadOS versions prior to 17.7.3, update to iPadOS 17.7.3 or later. For watchOS versions prior to 11.2, update to watchOS 11.2 or later. For visionOS versions prior to 2.2, update to visionOS 2.2 or later. For tvOS versions prior to 18.2, update to tvOS 18.2 or later. For macOS Sequoia versions prior to 15.2, update to macOS Sequoia 15.2 or later. For iOS versions prior to 18.2, update to iOS 18.2 or later. For iPadOS versions prior to 18.2, update to iPadOS 18.2 or later. For macOS Ventura versions prior to 13.7.2, update to macOS Ventura 13.7.2 or later. For macOS Sonoma versions prior to 14.7.2, update to macOS Sonoma 14.7.2 or later.

An out-of-bounds read issue was addressed with improved input validation. Parsing a file may lead to disclosure of user information.

The issue is related to an out-of-bounds read that can be addressed with improved input validation. Parsing a file may lead to disclosure of user information.

An out-of-bounds access issue was addressed with improved bounds checking. Processing a maliciously crafted file may lead to unexpected app termination.

An out-of-bounds read issue was addressed with improved input validation. Parsing a file may lead to disclosure of user information.

The issue is related to the processing of maliciously crafted fonts, which may result in the disclosure of process memory. This is due to an out-of-bounds read information disclosure in the CoreText Font Ligature Caret List Parsing.