Tyler Bohan

A memory corruption issue was addressed with improved input validation.

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.13.6 macOS versions prior to 10.14 Description: A memory corruption issue was addressed with improved input validation. Recommendations: For versions prior to 10.13.6, update to macOS High Sierra 10.13.6 or later. For versions prior to 10.14, update to macOS Mojave 10.14 or later.

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.14.1 Description: A memory initialization issue was addressed with improved memory handling. Recommendations: For versions prior to 10.14.1, update to macOS Mojave 10.14.1 or later to resolve the issue.

A local privilege escalation issue exists in the Install Helper tool of Pixar Renderman for Mac OS X. This allows a user with local access to escalate their privileges to root, given they have initial access to the machine for a successful exploit.

A denial of service issue exists due to the improper handling of proprietary server certificates. An attacker can send a specially crafted challenge packet, causing the program to terminate and resulting in a denial of service condition. This can be triggered by compromising the server or using a man-in-the-middle attack.

The issue involves the `Projects` component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted GarageBand project file.

The issue involves the `Projects` component and allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted GarageBand project file.

The issue allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted EXR image with B44 compression. This is due to a buffer overflow in the ImageIO component.

The issue is caused by a buffer overflow in the ImageIO component. This can be exploited by a remote attacker using a specially crafted TIFF file, potentially allowing the execution of arbitrary code or causing a denial of service due to memory corruption.

The issue is caused by a buffer overflow in the CoreGraphics component of Mac OS X and iOS operating systems. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) using a specially crafted BMP image.

The issue allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted `xStride` and `yStride` values in an EXR image. This is due to a buffer overflow in the ImageIO service.

The issue is caused by a buffer overflow in the SceneKit component of the Mac OS X operating system. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) by using a specially crafted file.