Nicolas Seriot

An out-of-bounds read occurs due to insufficient bounds checking. This flaw allows an application to read kernel memory or cause unexpected system termination.

An authorization issue exists due to improper state management, which could allow an application to access sensitive user data.

The issue allows local users to gain console privileges through vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod touch.

The issue concerns the Application Sandbox, which fails to properly isolate third-party applications. This allows attackers to read arbitrary files in a third-party application's sandbox via a different third-party application.