Var10Ck

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** Improper input validation in the operating system kernel allows a malicious app to pass crafted data into a privileged system or kernel-facing interface. This can lead to kernel memory corruption, where the system's core memory is modified in an unintended way, or unexpected system termination. An attacker can exploit this by running a specially crafted app locally on a device to trigger the vulnerable code path and feed malformed inputs into the kernel, potentially resulting in a denial of service through forced reboots or privilege escalation. **Recommendations** Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Tahoe 26 **Description** An out-of-bounds read issue existed due to insufficient bounds checking. This could allow a malicious application to disclose coprocessor memory. **Recommendations** Update to macOS Tahoe 26 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 15.4 **Description** The issue was addressed with improved memory handling. An app may be able to corrupt coprocessor memory. **Recommendations** For versions prior to 15.4, update to macOS Sequoia 15.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Samsung Notes versions prior to 4.4.26.71 **Description** The issue is related to an out-of-bounds read when applying binary of pdf content. This allows attackers to read out-of-bounds memory. **Recommendations** For versions prior to 4.4.26.71, update to version 4.4.26.71 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Samsung Notes versions prior to 4.4.26.71 **Description** The issue is related to an out-of-bounds write in the parsing of bmp images, which can be exploited by local attackers to execute arbitrary code. **Recommendations** For versions prior to 4.4.26.71, update to version 4.4.26.71 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Samsung Notes versions prior to 4.4.26.71 **Description** The issue is related to an out-of-bounds read when applying binary data to text in Samsung Notes. This could potentially allow local attackers to read memory. **Recommendations** For versions prior to 4.4.26.71, update to version 4.4.26.71 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 15.2 watchOS versions prior to 11.2 tvOS versions prior to 18.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 **Description** The issue is related to a buffer overflow in the IOMobileFrameBuffer component of MacOs, tvOS, watchOS, iPadOS, and iOS operating systems. This can allow an attacker to impact the confidentiality, integrity, and availability of protected information. An app may be able to corrupt coprocessor memory. **Recommendations** For macOS versions prior to 15.2, update to macOS Sequoia 15.2 to resolve the issue. For watchOS versions prior to 11.2, update to watchOS 11.2 to resolve the issue. For tvOS versions prior to 18.2, update to tvOS 18.2 to resolve the issue. For iOS versions prior to 18.2, update to iOS 18.2 to resolve the issue. For iPadOS versions prior to 18.2, update to iPadOS 18.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 15.2 watchOS versions prior to 11.2 tvOS versions prior to 18.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 **Description** The issue is related to a buffer overflow, where an app may be able to corrupt coprocessor memory due to inadequate bounds checks. This can potentially allow an attacker to damage memory. **Recommendations** For macOS versions prior to 15.2, update to macOS Sequoia 15.2. For watchOS versions prior to 11.2, update to watchOS 11.2. For tvOS versions prior to 18.2, update to tvOS 18.2. For iOS versions prior to 18.2, update to iOS 18.2. For iPadOS versions prior to 18.2, update to iPadOS 18.2.

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.2 Description: An out-of-bounds access issue was addressed with improved bounds checking. This issue may allow an attacker to cause unexpected system termination or arbitrary code execution in DCP firmware. Recommendations: For versions prior to 15.2, update to macOS Sequoia 15.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 15.2 watchOS versions prior to 11.2 tvOS versions prior to 18.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 **Description** The issue is related to a buffer memory out-of-bounds write. It may allow an attacker to corrupt coprocessor memory. The problem was addressed with improved bounds checks. **Recommendations** For macOS versions prior to 15.2, update to macOS Sequoia 15.2. For watchOS versions prior to 11.2, update to watchOS 11.2. For tvOS versions prior to 18.2, update to tvOS 18.2. For iOS versions prior to 18.2, update to iOS 18.2. For iPadOS versions prior to 18.2, update to iPadOS 18.2.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 15.2 watchOS versions prior to 11.2 tvOS versions prior to 18.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 **Description** The issue is related to a memory reading problem beyond the allowed range in the IOMobileFrameBuffer component of MacOs, tvOS, watchOS, iPadOS, and iOS operating systems. This may allow an attacker to compromise data integrity. An app may be able to corrupt coprocessor memory. **Recommendations** For macOS versions prior to 15.2, update to macOS Sequoia 15.2 to resolve the issue. For watchOS versions prior to 11.2, update to watchOS 11.2 to resolve the issue. For tvOS versions prior to 18.2, update to tvOS 18.2 to resolve the issue. For iOS versions prior to 18.2, update to iOS 18.2 to resolve the issue. For iPadOS versions prior to 18.2, update to iPadOS 18.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.1 iPadOS versions prior to 18.1 **Description** The issue was addressed with improved bounds checks. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware. **Recommendations** For iOS versions prior to 18.1, update to iOS 18.1 to resolve the issue. For iPadOS versions prior to 18.1, update to iPadOS 18.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.1 iPadOS versions prior to 18.1 **Description** The issue was addressed with improved bounds checks. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware. **Recommendations** For iOS versions prior to 18.1, update to iOS 18.1 to resolve the issue. For iPadOS versions prior to 18.1, update to iPadOS 18.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.1 iPadOS versions prior to 18.1 **Description** The issue was addressed with improved bounds checks. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware. **Recommendations** For iOS versions prior to 18.1, update to iOS 18.1 to resolve the issue. For iPadOS versions prior to 18.1, update to iPadOS 18.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Samsung Notes versions prior to 4.4.21.62 **Description** The issue is related to an out-of-bounds read in the parsing object header, allowing a local attacker to access unauthorized memory. **Recommendations** For versions prior to 4.4.21.62, update to version 4.4.21.62 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Samsung Notes versions prior to 4.4.21.62 **Description** The issue is related to an out-of-bounds read in applying connection points, which could allow local attackers to potentially read memory. **Recommendations** For versions prior to 4.4.21.62, update to version 4.4.21.62 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Samsung Notes versions prior to 4.4.21.62 **Description** The issue is related to an out-of-bounds write in applying connected information. This could potentially allow local attackers to execute arbitrary code with the privilege of Samsung Notes. **Recommendations** For versions prior to 4.4.21.62, update to version 4.4.21.62 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Samsung Notes versions prior to 4.4.21.62 **Description** The issue is related to an out-of-bounds read in the parsing connected object list. This allows a local attacker to access unauthorized memory. **Recommendations** For versions prior to 4.4.21.62, update to version 4.4.21.62 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Samsung Notes versions prior to 4.4.21.62 **Description** The issue is an out-of-bounds read in applying own binary, which allows local attackers to potentially read memory. **Recommendations** For versions prior to 4.4.21.62, update to version 4.4.21.62 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14.6 **Description** An out-of-bounds write issue was addressed with improved input validation. This issue may allow an app to cause a coprocessor crash. **Recommendations** For macOS versions prior to 14.6, update to macOS Sonoma 14.6 to resolve the issue.