Ivan Fratric

Processing a maliciously crafted calendar invitation may lead to memory corruption due to an out-of-bounds write issue, which occurs when data is written outside the intended memory boundary.

A type confusion issue exists in the libxslt library due to the reuse of the same memory field, `psvi`, for both stylesheet and input data during XML transformations. This can lead to application crashes, memory corruption, denial of service, or unexpected behavior.

A vulnerability was identified where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access and potentially, memory corruption.

The issue allows a malicious website to exfiltrate data cross-origin. This was addressed with improved checks.

The issue is related to a use-after-free error in the XSLTProcessor when executing JavaScript code while transforming a document. This could allow a remote attacker to compromise a vulnerable system. The estimated number of potentially affected devices worldwide is not provided. There is no information about real-world incidents where this issue was exploited.

The issue is related to an inconsistent comparator in xslt/txNodeSorter, potentially leading to out-of-bounds access.

An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. The issue arises from the failure to reset the `mCompileResult` in the `txMozillaXSLTProcessor::ImportStylesheet`, resulting in a stale error state that persists, causing subsequent transformations to use freed memory and leading to a use-after-free condition.

The issue was addressed with improved bounds checks. Parsing a maliciously crafted video file may lead to unexpected system termination.

The issue was addressed with improved bounds checks. Parsing a maliciously crafted video file may lead to unexpected system termination.

The issue is related to parsing a maliciously crafted video file, which may lead to unexpected system termination. It was addressed with improved bounds checks.

The issue is related to a buffer overflow in the AppleVA component of the macOS operating system, which can lead to arbitrary code execution when processing an image. This is due to improper memory handling.

The issue involves multiple memory corruption problems that have been resolved through enhanced input validation. Processing a maliciously crafted file can lead to unexpected application termination or arbitrary code execution.

The issue is related to multiple memory corruption problems that have been addressed through improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. The vulnerability is also associated with a buffer overflow in the AppleGraphicsControl component, which could allow a remote attacker to execute arbitrary code using a specially crafted file.

The issue is related to multiple memory corruption problems that have been addressed through improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. The vulnerability is also associated with a buffer overflow in the AppleGraphicsControl component, which can allow an attacker to execute arbitrary code using a specially crafted file.

The issue is related to multiple memory corruption problems that have been addressed through improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. The vulnerability is also associated with a buffer overflow in the AppleGraphicsControl component, which can allow an attacker to execute arbitrary code using a specially crafted file.

The issue is related to a buffer overflow in the AppleGraphicsControl component of the macOS Sonoma operating system. It may allow an attacker to execute arbitrary code using a specially crafted file. The problem is associated with memory corruption issues, which can be triggered by processing a maliciously crafted file, potentially leading to unexpected app termination or arbitrary code execution.

The issue is related to a buffer overflow in the AppleVA component of the macOS operating system, which can lead to unexpected app termination or arbitrary code execution when processing a file. This is due to improper memory handling.

The issue is related to a buffer overflow in the AppleGraphicsControl component of the macOS operating system. It may allow an attacker to execute arbitrary code using a specially crafted file. The problem is associated with multiple memory corruption issues, which have been addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

The issue is related to a buffer overflow in the AppleGraphicsControl component of the macOS operating system. It may allow an attacker to execute arbitrary code using a specially crafted file. The problem is caused by multiple memory corruption issues, which have been addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

The issue is related to a buffer overflow in the AppleGraphicsControl component of the macOS operating system. It may allow an attacker to execute arbitrary code using a specially crafted file. The problem is caused by multiple memory corruption issues, which have been addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.