Zhuo Liang

An integer overflow issue was addressed through improved input validation. The issue may lead to arbitrary code execution when processing maliciously crafted web content.

A memory corruption issue was addressed with improved state management, allowing an application to potentially execute arbitrary code with kernel privileges.

An application may be able to gain elevated privileges due to an issue that has been addressed with improved checks.

A memory corruption issue existed in the handling of IPv6 packets due to improper memory management. This could allow a malicious application to determine kernel memory layout. The issue was addressed with improved memory management.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges.

A validation issue was addressed with improved input sanitization. An application may be able to read restricted memory.

A memory corruption issue was addressed by removing the vulnerable code. This issue may allow a malicious application to break out of its sandbox.

The issue involves an out-of-bounds read that has been addressed with improved bounds checking. A malicious application may be able to break out of its sandbox.

A use after free issue was addressed with improved memory management. This allows an application to potentially execute arbitrary code with kernel privileges.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges.

A buffer overflow issue was addressed through improved size validation, which could allow a malicious application to execute arbitrary code with kernel privileges.

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.14.2 Description: An out-of-bounds read issue was addressed through improved input validation. Recommendations: For versions prior to 10.14.2, update to macOS Mojave 10.14.2 or later to resolve the issue.

A memory initialization issue was addressed with improved memory handling. A malicious application may be able to break out of its sandbox.

The issue allows a malicious application to read restricted memory due to an out-of-bounds read. This was addressed with improved bounds checking.

The issue is related to memory corruption and can be triggered by processing maliciously crafted web content, potentially leading to arbitrary code execution. It is caused by a buffer overflow in the WebKit display module. A remote attacker can exploit this issue using a specially crafted web page, allowing for remote code execution.

A memory corruption issue was addressed with improved memory handling.

The issue involves the `Hypervisor` component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. This is caused by a buffer overflow in memory.