Tr3E

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions 5.8 through 5.15.14 **Description** The issue is related to errors in pointer dereferencing in the eBPF subsystem of the Linux kernel, allowing local users to gain privileges due to the availability of pointer arithmetic via certain * OR NULL pointer types. **Recommendations** For Linux kernel versions 5.8 through 5.15.14, update to version 5.10.92, 5.15.15, or 5.16.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 14.7 Apple macOS versions prior to 11.5 Apple watchOS versions prior to 7.6 Apple tvOS versions prior to 14.7 Apple Security Update versions prior to 2021-005 for Mojave Apple Security Update versions prior to 2021-004 for Catalina **Description** A local attacker may cause unexpected application termination or arbitrary code execution due to this issue. The issue was addressed with improved checks. **Recommendations** For iOS versions prior to 14.7, update to iOS 14.7 or later. For macOS versions prior to 11.5, update to macOS Big Sur 11.5 or later. For watchOS versions prior to 7.6, update to watchOS 7.6 or later. For tvOS versions prior to 14.7, update to tvOS 14.7 or later. For Security Update versions prior to 2021-005 for Mojave, apply Security Update 2021-005 or later. For Security Update versions prior to 2021-004 for Catalina, apply Security Update 2021-004 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 14.7 Apple macOS versions prior to Big Sur 11.5 Apple watchOS versions prior to 7.6 Apple tvOS versions prior to 14.7 Apple macOS Mojave versions prior to Security Update 2021-005 Apple macOS Catalina versions prior to Security Update 2021-004 **Description** The issue arises from processing a maliciously crafted tiff file, which may lead to a denial-of-service or potentially disclose memory contents. **Recommendations** For iOS versions prior to 14.7, update to iOS 14.7 or later. For macOS versions prior to Big Sur 11.5, update to macOS Big Sur 11.5 or later. For watchOS versions prior to 7.6, update to watchOS 7.6 or later. For tvOS versions prior to 14.7, update to tvOS 14.7 or later. For macOS Mojave versions prior to Security Update 2021-005, apply Security Update 2021-005 or later. For macOS Catalina versions prior to Security Update 2021-004, apply Security Update 2021-004 or later.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions 5.8 through 5.16 **Description** An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker with special privileges to crash the system or leak internal information. The issue can also be exploited by a local unprivileged user to gain elevated privileges and execute code at the kernel level. **Recommendations** For Linux kernel versions 5.8 through 5.16, update to a newer version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** nmealib version 0.5.3 **Description** A stack-based buffer overflow was discovered in the nmealib library, specifically in the `nmea parse()` function in `parser.c`. This issue allows an attacker to trigger denial of service, and potentially arbitrary code execution in certain contexts, by providing malformed data to a product that uses this library. **Recommendations** For version 0.5.3, consider restricting the use of the `nmea parse()` function until a patch is available to prevent potential exploitation. Additionally, ensure that all data parsed by this function is thoroughly validated to minimize the risk of denial of service or arbitrary code execution.