P1Umer

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 124 **Description** The issue is related to incorrect handling of WASM register values. Exploitation of this issue could allow a remote attacker to execute arbitrary code. The problem arises when invalid data is passed, potentially leading to the creation of invalid WASM values, such as converting arbitrary integers into pointer values. **Recommendations** For versions prior to 124, update to version 124 or later to resolve the issue. As a temporary workaround, consider restricting the use of WASM functionality until a patch is available.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.1 iPadOS versions prior to 18.1 watchOS versions prior to 11.1 visionOS versions prior to 2.1 tvOS versions prior to 18.1 macOS Sequoia versions prior to 15.1 Safari versions prior to 18.1 **Description** A memory corruption issue was addressed with improved input validation. Processing maliciously crafted web content may lead to an unexpected process crash. **Recommendations** For iOS versions prior to 18.1, update to iOS 18.1 to resolve the issue. For iPadOS versions prior to 18.1, update to iPadOS 18.1 to resolve the issue. For watchOS versions prior to 11.1, update to watchOS 11.1 to resolve the issue. For visionOS versions prior to 2.1, update to visionOS 2.1 to resolve the issue. For tvOS versions prior to 18.1, update to tvOS 18.1 to resolve the issue. For macOS Sequoia versions prior to 15.1, update to macOS Sequoia 15.1 to resolve the issue. For Safari versions prior to 18.1, update to Safari 18.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** visionOS versions prior to 2.3 Safari versions prior to 18.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 macOS Sequoia versions prior to 15.3 watchOS versions prior to 11.3 tvOS versions prior to 18.3 **Description** The issue is related to improved memory handling and may lead to a denial-of-service when processing web content. It is associated with unlimited resource allocation, which can be exploited by a remote attacker to cause a denial-of-service. **Recommendations** For visionOS versions prior to 2.3, update to visionOS 2.3. For Safari versions prior to 18.3, update to Safari 18.3. For iOS versions prior to 18.3, update to iOS 18.3. For iPadOS versions prior to 18.3, update to iPadOS 18.3. For macOS Sequoia versions prior to 15.3, update to macOS Sequoia 15.3. For watchOS versions prior to 11.3, update to watchOS 11.3. For tvOS versions prior to 18.3, update to tvOS 18.3.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 113 Firefox ESR versions prior to 102.11 Thunderbird versions prior to 102.11 **Description** A type checking bug could lead to invalid code being compiled, potentially allowing a remote attacker to cause a denial of service using a specially crafted website. The issue is related to type confusion errors in Firefox and Firefox ESR, which can be exploited by a remote attacker. In the case of Mozilla Thunderbird, the vulnerability is associated with a type confusion error when processing HTML content, allowing an attacker to trick a victim into opening a specially crafted website, causing a browser crash. **Recommendations** For Firefox versions prior to 113, update to version 113 or later. For Firefox ESR versions prior to 102.11, update to version 102.11 or later. For Thunderbird versions prior to 102.11, update to version 102.11 or later.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 16 iOS versions prior to 16 iOS versions prior to 15.7 iPadOS versions prior to 15.7 **Description** A buffer overflow issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution. The issue is related to the WebKitGTK and WPE WebKit modules, which can allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. **Recommendations** For Safari versions prior to 16, update to Safari 16 to resolve the issue. For iOS versions prior to 16, update to iOS 16 to resolve the issue. For iOS versions prior to 15.7, update to iOS 15.7 to resolve the issue. For iPadOS versions prior to 15.7, update to iPadOS 15.7 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** WebKitGTK versions prior to the fixed version WPE WebKit versions prior to the fixed version macOS Big Sur versions prior to 11.7 macOS Ventura versions prior to 13 iOS versions prior to 16 iOS versions prior to 15.7 iPadOS versions prior to 15.7 watchOS versions prior to 9 macOS Monterey versions prior to 12.6 tvOS versions prior to 16 **Description** The issue is related to an out-of-bounds write problem, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service. Processing maliciously crafted web content may lead to arbitrary code execution. **Recommendations** For WebKitGTK, update to a version that includes the fix for the out-of-bounds write issue. For WPE WebKit, update to a version that includes the fix for the out-of-bounds write issue. For macOS Big Sur, update to version 11.7 or later. For macOS Ventura, update to version 13 or later. For iOS, update to version 16 or later, or version 15.7 or later. For iPadOS, update to version 15.7 or later. For watchOS, update to version 9 or later. For macOS Monterey, update to version 12.6 or later. For tvOS, update to version 16 or later.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 15.6 macOS Monterey versions prior to 12.5 **Description** A memory corruption issue was addressed with improved state management. Processing maliciously crafted web content may lead to arbitrary code execution. **Recommendations** For Safari versions prior to 15.6, update to Safari 15.6 or later. For macOS Monterey versions prior to 12.5, update to macOS Monterey 12.5 or later.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 15.6 macOS Monterey versions prior to 12.5 **Description** A logic issue was addressed with improved state management, which could allow a user to be tracked through their IP address. **Recommendations** For Safari versions prior to 15.6, update to Safari 15.6 to resolve the issue. For macOS Monterey versions prior to 12.5, update to macOS Monterey 12.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 15.6 iOS versions prior to 15.6 iPadOS versions prior to 15.6 macOS Monterey versions prior to 12.5 **Description** A memory corruption issue was addressed with improved validation. Processing maliciously crafted web content may lead to arbitrary code execution. The issue is related to a buffer overflow in WPE WebKit and WebKitGTK modules, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service. **Recommendations** For Safari versions prior to 15.6, update to Safari 15.6 to resolve the issue. For iOS versions prior to 15.6, update to iOS 15.6 to resolve the issue. For iPadOS versions prior to 15.6, update to iPadOS 15.6 to resolve the issue. For macOS Monterey versions prior to 12.5, update to macOS Monterey 12.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Vim versions prior to 8.2 **Description** The issue is related to an out-of-bounds read in the Vim text editor, specifically in the `gchar cursor` function of the `misc1.c` component. This allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. **Recommendations** For versions prior to 8.2, update to version 8.2 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Vim versions prior to 8.2.4959 **Description** The issue is related to a NULL pointer dereference error in the `vim regexec string()` function of the Vim text editor. Exploitation of this issue may allow an attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability can be exploited by a remote attacker who tricks the victim into opening a specially crafted file, potentially leading to a denial-of-service (DoS) attack. **Recommendations** For versions prior to 8.2.4959, update to version 8.2.4959 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `vim regexec string()` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Moddable versions prior to 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 **Description** The issue is related to an out-of-bounds read via the `fxUint8Getter` function at `/moddable/xs/sources/xsDataView.c`. **Recommendations** For versions prior to 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45, consider disabling the `fxUint8Getter` function as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Nginx NJS versions prior to a fixed version, the exact version of which is not specified. **Description** The issue is related to a buffer overflow in the njs value own enumerate() function of the njs interpreter in the Nginx server. This could allow a remote attacker to cause a denial of service. The function njs value own enumerate at src/njs value.c is specifically affected. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Nginx NJS version 0.7.2 **Description** The issue is related to a segmentation violation in the `njs set number()` function, which can be caused by insufficient input data sanitization, leading to a buffer overflow. This can potentially allow a remote attacker to cause a denial of service. **Recommendations** For Nginx NJS version 0.7.2, as a temporary workaround, consider disabling the `njs set number()` function until a patch is available. Restrict access to the Nginx server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** nginx njs version 0.7.2 **Description** The issue is related to a Use-after-free in the `njs function frame alloc()` function when it tries to invoke from a restored frame saved with `njs function frame save()`. This can allow a remote attacker to impact the confidentiality, integrity, and availability of information. **Recommendations** For nginx njs version 0.7.2, as a temporary workaround, consider disabling the `njs function frame alloc()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** njs versions through 0.7.1 **Description** A control flow hijack was discovered in njs, caused by a Type Confusion vulnerability in the `njs promise perform then()` function. This issue affects njs used in NGINX. **Recommendations** For versions through 0.7.1, consider disabling the `njs promise perform then()` function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 12.4 macOS Mojave versions prior to 10.14.6 tvOS versions prior to 12.4 Safari versions prior to 12.1.2 iTunes for Windows versions prior to 12.9.6 iCloud for Windows versions prior to 7.13 and 10.6 **Description** The issue is related to memory corruption and can be exploited by processing maliciously crafted web content, potentially leading to arbitrary code execution. It is associated with a buffer overflow in the WebKit display module. Exploitation of this issue may allow a remote attacker to execute arbitrary code using a specially crafted web page. **Recommendations** For iOS versions prior to 12.4, update to iOS 12.4 or later. For macOS Mojave versions prior to 10.14.6, update to macOS Mojave 10.14.6 or later. For tvOS versions prior to 12.4, update to tvOS 12.4 or later. For Safari versions prior to 12.1.2, update to Safari 12.1.2 or later. For iTunes for Windows versions prior to 12.9.6, update to iTunes for Windows 12.9.6 or later. For iCloud for Windows versions prior to 7.13 and 10.6, update to iCloud for Windows 7.13 or 10.6 or later.