Min (Spark) Zheng

A local user may be able to read a persistent account identifier. This issue was addressed with a new entitlement.

A device configuration issue was addressed with an updated configuration. This issue allows a device to be passively tracked by its Bluetooth MAC address.

An out-of-bounds write issue was addressed with improved bounds checking, allowing an application to potentially execute arbitrary code with kernel privileges.

An out-of-bounds write issue was addressed with improved bounds checking, allowing an application to potentially execute arbitrary code with kernel privileges.

A use after free issue was addressed with improved memory management, which may allow an application to gain elevated privileges.

A permissions issue was addressed by removing vulnerable code and adding additional checks. A malicious application may be able to access restricted files.

An authorization issue was addressed with improved state management. A malicious application may be able to read sensitive location information.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with kernel privileges.

A validation issue existed in the entitlement verification, which has been addressed with improved validation of the process entitlement.

The issue involves the `IOFireWireFamily` component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

The issue involves the IOFireWireFamily component and allows attackers to bypass intended memory-read restrictions via a crafted app.

The issue involves the `Bluetooth` component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. This is caused by a buffer overflow in memory.