Johann Rehberger

An out-of-bounds write issue occurs when processing a maliciously crafted image, which may lead to memory corruption. This is addressed through improved bounds checking.

An improper neutralization of special elements used in a command ('command injection') exists in M365 Copilot. This allows an unauthorized attacker to disclose information over a network.

Improper neutralization of special elements used in a command leads to a command injection issue in GitHub Copilot and Visual Studio, allowing an unauthorized attacker to execute code locally. This can be achieved through prompt injection, where an attacker hides malicious instructions within a repository comment, README, or PR description. The AI assistant may be tricked into modifying the `.vscode/settings.json` file to enable an auto-approve mode, which allows the agent to execute arbitrary bash commands in the terminal without human confirmation.