Lyutoon

A path handling issue exists in the `revisiond` component that allows an application already installed on the system to gain root privileges through local privilege escalation. The issue was caused by insufficient validation during path processing.

A logic issue exists where an application may be able to gain root privileges, which are the highest level of administrative access on the system. This was addressed by implementing improved checks.

An application may be able to access user-sensitive data due to improper handling of symlinks (symbolic links), which are files that point to another file or directory on the system.

An out-of-bounds read occurs due to insufficient bounds checking. This flaw allows an application to read kernel memory or cause unexpected system termination. An out-of-bounds read is a condition where a program reads data past the end or before the beginning of the intended buffer.

A race condition, which occurs when the timing or sequence of events is not properly controlled, was identified. This issue allows an app to cause unexpected system termination.

Picklescan fails to detect the `numpy.f2py.crackfortran.getlincoef` gadget within pickle ` reduce ` methods. This allows attackers to craft malicious pickle files that execute arbitrary Python code upon loading, bypassing safety checks and enabling supply-chain poisoning of shared model files.

Picklescan fails to detect the `numpy.f2py.crackfortran. eval length` gadget within pickle ` reduce ` methods. This allows attackers to craft malicious pickle files that execute arbitrary Python code when loaded by users who rely on Picklescan's safety validation. The issue occurs because a crafted object can return the ` eval length` function with attacker-controlled arguments; while the scan reports the file as safe, the `pickle.load()` function triggers the execution of the code.

A parsing logic error exists in the ` list globals()` function when processing `STACK GLOBAL` opcodes. The scanner fails to track arguments in the correct range, specifically omitting the opcode at position `0` by only considering the range from `1` to `n-1`. This allows attackers to craft malicious pickle files with arguments at position `0`, triggering unexpected exceptions that result in a detection bypass. This issue also affects online Hugging Face pickle scanners.

The issue allows an attacker to turn on sharing of an iCloud folder without authentication. This was addressed with additional entitlement checks.

The issue is related to a buffer overflow in the ImageIO component of Apple operating systems, which can be exploited by a remote attacker using a specially crafted image file, potentially leading to arbitrary code execution. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.

An issue in Gaberiele Venturi pandasai allows a remote attacker to execute arbitrary code via a crafted request to the `prompt` function.

An issue in langchain langchain-ai allows a remote attacker to execute arbitrary code via a crafted script to the `PythonAstREPLTool. run` component.

An issue in llama index allows a remote attacker to execute arbitrary code via the `exec` parameter in the PandasQueryEngine function. This enables the attacker to perform unauthorized actions on the affected system.

The issue allows a remote attacker to execute arbitrary code via the `PALChain` parameter in the Python `exec` method. This enables the attacker to run malicious code, potentially leading to system compromise.

The issue allows an attacker to execute arbitrary code because Python code with `os.system`, `exec`, or `eval` can be used. This is possible via the PALChain in the python `exec` method.

The issue is related to a stack-based buffer over-read in the `file copystr` function in `funcs.c`, which can lead to a denial of service when a specially crafted file is used. This can be exploited by an attacker to cause service disruption.