Michael Deplante

Processing a maliciously crafted file may lead to a denial-of-service (a condition where a system becomes unavailable to its intended users) or potentially disclose memory contents.

Processing a maliciously crafted image may corrupt process memory due to improper memory handling.

An out-of-bounds write issue exists due to insufficient bounds checking when processing maliciously crafted USD files. This may result in unexpected application termination.

The software contains a flaw in a script that could allow an attacker to inject code by providing malicious data. Exploitation of this issue may result in code execution, privilege escalation, information disclosure, or data tampering.

A flaw exists in Hugging Face Accelerate that allows remote attackers to execute arbitrary code on affected systems. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file. The issue stems from insufficient validation of user-supplied data during the parsing of checkpoints, leading to the deserialization of untrusted data. An attacker can exploit this to execute code within the current process.

A flaw exists in the parsing of checkpoints within Hugging Face Transformers megatron gpt2, stemming from insufficient validation of user-supplied data. This can lead to the deserialization of untrusted data, potentially allowing an attacker to execute code in the context of the current process. User interaction is required, as the target must visit a malicious page or open a malicious file to trigger the issue.

An issue involving out-of-bounds access exists due to insufficient bounds checking. Processing a specially crafted media file could result in application crashes or memory corruption.

An out-of-bounds access issue exists due to insufficient bounds checking. Processing a maliciously crafted media file may result in application termination or memory corruption.

An issue involving out-of-bounds access exists due to insufficient bounds checking. Processing a specially crafted media file could result in application crashes or memory corruption.

An issue involving out-of-bounds access exists due to insufficient bounds checking. Processing a specially crafted media file could result in application crashes or memory corruption.

An input validation issue with improved memory handling may lead to unexpected app termination when processing a maliciously crafted file.

A memory corruption issue was addressed with improved validation. Processing a maliciously crafted file may lead to heap corruption.

Processing a maliciously crafted image may result in disclosure of process memory. This issue was addressed with improved checks.

An out-of-bounds access issue was addressed with improved bounds checking. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.

An out-of-bounds access issue exists due to insufficient bounds checking. Processing a maliciously crafted media file may lead to unexpected application termination or corruption of process memory.

An out-of-bounds read issue was addressed through improved input validation. Processing a maliciously crafted USD file may lead to the disclosure of memory contents.

The issue was addressed with improved memory handling. An attacker may be able to cause unexpected system termination or corrupt kernel memory. This flaw allows local attackers to escalate privileges and potentially execute arbitrary code with kernel-level access.

A double free issue was addressed with improved memory management. This issue may allow a remote attacker to cause an unexpected app termination.

The issue is related to an uncontrolled search path element, which can lead to local privilege escalation. This is a 0-day vulnerability, meaning it is being exploited before a fix is available. The estimated number of potentially affected devices worldwide is not specified.

An out-of-bounds read issue was addressed with improved bounds checking. Parsing a file may lead to disclosure of user information. The issue is related to a buffer overflow in the SceneKit component of macOS, iOS, iPadOS, watchOS, tvOS, and visionOS operating systems, which can allow an attacker to disclose protected information.