Jianjun Dai

An out-of-bounds read issue was addressed with improved bounds checking. Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory.

A logic issue was addressed with improved state management, allowing a remote attacker to potentially cause arbitrary code execution.

The issue is related to an out-of-bounds read and can be exploited by a remote attacker, allowing them to execute arbitrary code when processing maliciously crafted web content. This can occur due to insufficient bounds checking, which has been improved in the fixed versions.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.4 iPadOS versions prior to 14.4 Description: The issue is related to an out-of-bounds write that can be addressed with improved input validation. A remote attacker may be able to cause arbitrary code execution. Recommendations: For iOS versions prior to 14.4, update to iOS 14.4 or later. For iPadOS versions prior to 14.4, update to iPadOS 14.4 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.4 iPadOS versions prior to 14.4 Description: The issue is related to an out-of-bounds write that can be addressed with improved input validation. A remote attacker may be able to cause arbitrary code execution. Recommendations: For iOS versions prior to 14.4, update to iOS 14.4 or later. For iPadOS versions prior to 14.4, update to iPadOS 14.4 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.4 iPadOS versions prior to 14.4 Description: The issue is related to an out-of-bounds read that can be addressed with improved input validation. A remote attacker may be able to cause arbitrary code execution. Recommendations: For iOS versions prior to 14.4, update to iOS 14.4 or later. For iPadOS versions prior to 14.4, update to iPadOS 14.4 or later.

A validation issue was addressed with improved input sanitization, allowing an application to potentially read restricted memory.

An out-of-bounds read issue was addressed with improved input validation, which could allow a remote attacker to leak sensitive user information.

An out-of-bounds read issue was addressed with improved input validation. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.

A memory corruption issue was addressed with improved input validation. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

A memory corruption issue was addressed with improved input validation. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

A memory corruption issue was addressed with improved input validation. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

An out-of-bounds read issue was addressed with improved input validation. A remote attacker may be able to leak memory.

The issue is related to an elevation of privilege vulnerability in the Qualcomm camera driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This is rated as High because it first requires compromising a privileged process. The vulnerability is associated with insufficient access control in the Qualcomm camera driver, potentially enabling a remote attacker to elevate privileges and execute arbitrary code in the kernel context using a local malicious application.