Zerokeeper

A memory corruption issue was addressed with improved state management. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 14.1 iOS versions prior to 12.5.3 iOS versions prior to 14.5 iPadOS versions prior to 14.5 watchOS versions prior to 7.4 tvOS versions prior to 14.5 macOS Big Sur versions prior to 11.3 Description: The issue is related to a use after free problem in the WebKit module, which can be exploited by a remote attacker using a specially crafted web page, potentially leading to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Recommendations: For Safari version prior to 14.1, update to Safari 14.1 or later. For iOS version prior to 12.5.3, update to iOS 12.5.3 or later. For iOS version prior to 14.5, update to iOS 14.5 or later. For iPadOS version prior to 14.5, update to iPadOS 14.5 or later. For watchOS version prior to 7.4, update to watchOS 7.4 or later. For tvOS version prior to 14.5, update to tvOS 14.5 or later. For macOS Big Sur version prior to 11.3, update to macOS Big Sur 11.3 or later.

A buffer overflow issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

A memory leak issue was found in the AP4 DescriptorFactory::CreateDescriptorFromStream function in Core/Ap4DescriptorFactory.cpp, which is called from the AP4 EsdsAtom class in Core/Ap4EsdsAtom.cpp. This issue is demonstrated by the mp42aac tool.

The issue is related to a memory leak in the `png create info struct` function in libpng. This leak occurs as demonstrated by pngcp. A third party has stated that they do not think it is libpng's job to free this buffer. The vulnerability may allow a remote attacker to cause a denial of service using multiple network protocols.

The issue is related to a memory leak in the TIFFFdOpen function of the LibTIFF library, which can lead to uncontrolled memory allocation. This can be exploited by a remote attacker to cause a denial of service.

The issue is related to a SEGV in the `fz load page` function of the fitz/document.c file. This problem arises from page-number mishandling in several files, including cbz/mucbz.c, cbz/muimg.c, and svg/svg-doc.c. The issue can be demonstrated using mutool.

The issue is related to infinite recursion with stack consumption in the `svg run use symbol`, `svg run element`, and `svg run use` functions in the svg-run.c file. This can be demonstrated using mutool.

The issue is related to a use-after-free error in the error function in elfcomm.c, which can be triggered by a crafted ELF file. This can potentially allow an attacker to cause a denial of service.