Meysam Firouzi

A memory corruption issue exists when handling client exceptions, potentially allowing unauthorized channel access.

Name of the Vulnerable Software and Affected Versions: Linux Kernel (affected versions not specified) Description: The issue is related to a use-after-free vulnerability in the Linux kernel's 9p file system. This occurs when a thread looks up a fid through dentry while another thread unlinks it, resulting in a use-after-free on dentry's d fsdata fid list. The problem arises because d fsdata was not accessed under d lock, and since d release() is normally only called once the dentry is no longer accessible, but it is also called explicitly in v9fs remove, the lock is required. The vulnerability can be exploited to potentially escalate privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.

An out-of-bounds read issue was addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

A validation issue was addressed with improved input sanitization, allowing an application to potentially read restricted memory. This issue is related to the Metal Framework library and can be exploited by remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the Metal Framework library is required to exploit this vulnerability.

The issue is related to a buffer overflow in the ImageIO component of macOS, iOS, iPadOS, tvOS, and watchOS, which may allow an attacker to execute arbitrary code when processing an image. This is due to improper memory handling.

The issue involves memory corruption due to an untrusted pointer dereference in automotive systems during a system call. This can potentially lead to significant security risks.

An out-of-bounds read issue was addressed with improved input validation. Processing an image may result in disclosure of process memory.

A buffer overflow issue was addressed with improved bounds checking. This issue may lead to arbitrary code execution when processing an image. The vulnerability is related to the ImageIO component in MacOS, iOS, tvOS, iPadOS, and watchOS operating systems, which can be exploited by an attacker using a specially crafted file.

A memory corruption issue was addressed with improved state management, allowing an app to potentially execute arbitrary code with kernel privileges.

An out-of-bounds read was addressed with improved input validation. Processing an image may result in disclosure of process memory.

An out-of-bounds read issue was addressed with improved input validation. Processing a maliciously crafted image may result in disclosure of process memory.

An out-of-bounds read was addressed with improved input validation. Processing an image may result in disclosure of process memory.

The issue is related to an out-of-bounds read in memory, which may allow a remote attacker to disclose protected information. This can occur when processing an image, potentially resulting in the disclosure of process memory.

The issue is related to an out-of-bounds read in the ImageIO component, which can result in the disclosure of process memory when processing an image. This can potentially allow a remote attacker to reveal protected information. The estimated number of potentially affected devices worldwide is not specified.

A memory corruption issue was addressed with improved state management. Processing an image may lead to a denial-of-service.

This issue allows local attackers to disclose sensitive information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this issue. The specific flaw exists within the Parallels Tools component. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. An attacker can leverage this in conjunction with other issues to escalate privileges and execute arbitrary code in the context of the kernel.

A memory corruption issue was addressed with improved input validation, which may allow a malicious application to execute arbitrary code with kernel privileges. This issue is related to the IOMobileFrameBuffer function in the kernel of iOS, iPadOS, and macOS operating systems, and is associated with a buffer overflow in memory. Apple is aware of a report that this issue may have been actively exploited. The estimated number of potentially affected devices is not specified.

This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this issue. The specific flaw exists within the prl naptd process. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this issue to escalate privileges and execute code in the context of the hypervisor.

A remote code execution issue exists due to the improper handling of objects in memory by the Microsoft Office Access Connectivity Engine. This could allow a remote attacker to execute arbitrary code on a victim system by enticing the victim to open a specially crafted file.