Lee Dong Ha

A flaw exists in the processing of web content that could lead to a process crash. This issue is due to improper memory management, specifically a use-after-free condition.

A denial-of-service issue exists due to insufficient validation. A remote attacker may be able to cause a denial-of-service.

An out-of-bounds access issue exists due to insufficient bounds checking. Processing a specially crafted media file could cause an application to terminate unexpectedly or lead to memory corruption.

Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory due to insufficient input validation.

The issue involves improved memory handling. Processing a maliciously crafted image may corrupt process memory.

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 iPadOS versions prior to 17.7.4 macOS Sequoia versions prior to 15.3 watchOS versions prior to 11.3 tvOS versions prior to 18.3 Description: The issue was addressed with improved memory handling. An app may be able to cause unexpected system termination. Recommendations: For visionOS versions prior to 2.3, update to visionOS 2.3. For iOS versions prior to 18.3, update to iOS 18.3. For iPadOS versions prior to 18.3, update to iPadOS 18.3. For iPadOS versions prior to 17.7.4, update to iPadOS 17.7.4. For macOS Sequoia versions prior to 15.3, update to macOS Sequoia 15.3. For watchOS versions prior to 11.3, update to watchOS 11.3. For tvOS versions prior to 18.3, update to tvOS 18.3.

The issue allows local attackers to cause a denial of service (DoS) via an exr image file. This is a result of a Buffer Overflow vulnerability.