Yu Zhou

**Name of the Vulnerable Software and Affected Versions** Solid Edge SE2024 versions prior to V224.0 Update 9 **Description** A vulnerability has been identified that allows an attacker to execute code in the context of the current process by exploiting an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This issue is related to a buffer overflow in memory, which can be triggered by a specially crafted PAR file, potentially enabling an attacker to execute arbitrary code. **Recommendations** For Solid Edge SE2024 versions prior to V224.0 Update 9, update to V224.0 Update 9 or later to resolve the issue. As a temporary workaround, consider restricting the use of PAR files from untrusted sources until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Solid Edge SE2024 versions prior to V224.0 Update 9 **Description** A vulnerability has been identified in the affected applications, which contain an out of bounds read past the end of an allocated structure while parsing specially crafted PSM files. This could allow an attacker to execute code in the context of the current process. The issue is related to a buffer overflow in memory, which can be exploited by using a specially crafted PSM file to execute arbitrary code. **Recommendations** For Solid Edge SE2024 versions prior to V224.0 Update 9, update to V224.0 Update 9 or later to resolve the issue. As a temporary workaround, consider avoiding the use of specially crafted PSM files until a patch is applied. Restrict access to PSM file parsing functionality to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13 **Description** The issue was addressed with improved memory handling. Processing a maliciously crafted gcx file may lead to unexpected app termination or arbitrary code execution. **Recommendations** For versions prior to 13, update to macOS Ventura 13 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.15 iOS versions prior to 13.1 iPadOS versions prior to 13.1 tvOS versions prior to 13 watchOS versions prior to 6 **Description** A memory corruption issue was addressed with improved state management. Processing a maliciously crafted audio file may lead to arbitrary code execution. **Recommendations** For macOS versions prior to 10.15, update to macOS Catalina 10.15 or apply Security Update 2019-001 or Security Update 2019-006. For iOS versions prior to 13.1, update to iOS 13.1. For iPadOS versions prior to 13.1, update to iPadOS 13.1. For tvOS versions prior to 13, update to tvOS 13. For watchOS versions prior to 6, update to watchOS 6.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.15.6 Security Update versions prior to 2020-004 Mojave Security Update versions prior to 2020-004 High Sierra **Description** A buffer overflow issue was addressed with improved bounds checking, which may result in arbitrary code execution. **Recommendations** For macOS versions prior to 10.15.6, update to macOS Catalina 10.15.6. For Security Update versions prior to 2020-004 Mojave, apply Security Update 2020-004 Mojave. For Security Update versions prior to 2020-004 High Sierra, apply Security Update 2020-004 High Sierra.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 13.6 Apple iPadOS versions prior to 13.6 Apple macOS Catalina versions prior to 10.15.6 Apple tvOS versions prior to 13.4.8 Apple watchOS versions prior to 6.2.8 **Description** An out-of-bounds write issue was addressed with improved bounds checking. Processing a maliciously crafted audio file may lead to arbitrary code execution. **Recommendations** For iOS versions prior to 13.6, update to iOS 13.6 or later. For iPadOS versions prior to 13.6, update to iPadOS 13.6 or later. For macOS Catalina versions prior to 10.15.6, update to macOS Catalina 10.15.6 or later. For tvOS versions prior to 13.4.8, update to tvOS 13.4.8 or later. For watchOS versions prior to 6.2.8, update to watchOS 6.2.8 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.5 iPadOS versions prior to 13.5 macOS Catalina versions prior to 10.15.5 tvOS versions prior to 13.4.5 watchOS versions prior to 6.2.5 Description: The issue is related to an out-of-bounds read in the AudioToolbox library, which can be exploited by processing a maliciously crafted audio file, potentially leading to arbitrary code execution. This is a result of insufficient bounds checking, allowing an attacker to execute arbitrary code. Recommendations: For iOS versions prior to 13.5, update to iOS 13.5 or later. For iPadOS versions prior to 13.5, update to iPadOS 13.5 or later. For macOS Catalina versions prior to 10.15.5, update to macOS Catalina 10.15.5 or later. For tvOS versions prior to 13.4.5, update to tvOS 13.4.5 or later. For watchOS versions prior to 6.2.5, update to watchOS 6.2.5 or later. As a temporary workaround, consider avoiding the use of potentially malicious audio files until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (affected versions not specified) **Description** The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code in the context of the current user, potentially gaining the same user rights as the current user. If the current user has administrative rights, the attacker could take control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 11.4.1 Apple tvOS versions prior to 11.4.1 Apple watchOS versions prior to 4.3.2 Apple Safari versions prior to 11.1.2 Apple iTunes for Windows versions prior to 12.8 Apple iCloud for Windows versions prior to 7.6 **Description** The issue is related to multiple memory corruption problems that have been addressed through improved memory handling. **Recommendations** For iOS versions prior to 11.4.1, update to iOS 11.4.1 or later. For tvOS versions prior to 11.4.1, update to tvOS 11.4.1 or later. For watchOS versions prior to 4.3.2, update to watchOS 4.3.2 or later. For Safari versions prior to 11.1.2, update to Safari 11.1.2 or later. For iTunes for Windows versions prior to 12.8, update to iTunes 12.8 or later. For iCloud for Windows versions prior to 7.6, update to iCloud for Windows 7.6 or later.

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296, CVE-2018-8298.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 11.4 iCloud for Windows versions prior to 7.5 watchOS versions prior to 4.3.1 iTunes for Windows versions prior to 12.7.5 macOS High Sierra versions prior to 10.13.5 **Description** An out-of-bounds read issue was addressed through improved input validation. **Recommendations** For iOS versions prior to 11.4, update to version 11.4 or later. For iCloud for Windows versions prior to 7.5, update to version 7.5 or later. For watchOS versions prior to 4.3.1, update to version 4.3.1 or later. For iTunes for Windows versions prior to 12.7.5, update to version 12.7.5 or later. For macOS High Sierra versions prior to 10.13.5, update to version 10.13.5 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 60.0.3112.78 **Description** The issue is related to insufficient validation of untrusted input in PPAPI Plugins, which could allow a remote attacker to potentially gain privilege elevation. This can be achieved via a crafted HTML page. **Recommendations** For versions prior to 60.0.3112.78, update to version 60.0.3112.78 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** LibTIFF version 4.0.8 **Description** The issue is related to insufficient input validation in the TIFFOpen function, which can be exploited by a remote attacker to cause a denial of service. A crafted input file can control the value of `td imagelength`, and setting this value close to the amount of system memory can cause the system to hang or trigger the OOM killer. The ChopUpSingleUncompressedStrip function calls ` TIFFCheckMalloc` based on `td imagelength`, leading to the denial of service. **Recommendations** For LibTIFF version 4.0.8, consider restricting the use of the TIFFOpen function until a patch is available. As a temporary workaround, limit the input file size to prevent excessive memory allocation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 60.0.3112.78 Opera versions prior to 60.0.3112.78 **Description** The issue is related to insufficient validation of untrusted input in PPAPI Plugins, which could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This could be achieved by exploiting the vulnerability in the PPAPI implementation. **Recommendations** For Google Chrome versions prior to 60.0.3112.78, update to version 60.0.3112.78 or later to resolve the issue. For Opera versions prior to 60.0.3112.78, update to version 60.0.3112.78 or later to resolve the issue. As a temporary workaround, consider restricting access to PPAPI Plugins until a patch is available.