Jz

An application may be able to escape its designated security container, known as a sandbox. The issue was resolved through enhanced entitlements.

An input validation issue was addressed by removing the vulnerable code.

The issue was addressed with improved bounds checks. Processing a maliciously crafted image may lead to heap corruption.

The issue is caused by a buffer overflow in the ImageIO component, which may allow a remote attacker to disclose protected information. Processing an image may result in the disclosure of process memory. The issue was addressed with improved memory handling.

The issue is related to a local privilege escalation, where a malicious actor with read/write access to the host operating system can gain root access. This is due to insecure privilege management in the Raw Disk Handler component of the VMware Fusion hypervisor.