About the security content of macOS Big Sur 11.4

About the security content of macOS Big Sur 11.4 This document describes the security content of macOS Big Sur 11.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

PT-2021-18830 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.4 Security Update versions prior to 2021-003 Catalina Security Update versions prior to 2021-004 Mojave iOS versions prior to 14.6 iPadOS versions prior to 14.6 Description: A memory corruption issue was addressed...

Wordpress WP Super Edit 2.5.4 Plugin - Remote File Upload Vulnerability

Title: Wordpress Plugin WP Super Edit 2.5.4 - Remote File Upload Author: h4shur Vendor Homepage: https://wordpress.org Software Link: https://wordpress.org/plugins/wp-super-edit/ Version : 2.5.4 and earlier Tested on: Windows 10 & Google Chrome Category : Web Application Bugs Dork :...

Apple watchOS 资源管理错误漏洞

Apple watchOS is an operating system for smartwatches from Apple. A resource management error vulnerability exists in watchOS, which stems from a double error when processing files in the libxslt library. The following products and versions are affected: watchOS: 7.0 18R382, 7.0.1 18R395, 7.0.2...

CVE-2020-27948

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted audio file may lead to...

CVE-2021-1768

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted USD file may lead to unexpected application termination or...

CVE-2020-27948

The CVE-2020-27948 entry concerns an out-of-bounds write vulnerability in CoreAudio that could allow arbitrary code execution when processing a malicious audio file. Affected Apple platforms and releases include watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2...

CVE-2021-3478

CVE-2021-3478 affects OpenEXR’s scanline input file handling. A crafted file processed by OpenEXR can cause excessive memory usage, with the greatest impact on availability. Multiple connected sources corroborate a memory-denial threat vector in OpenEXR before 3.0.0-beta. Debian LTS advisories sh...

USN-4831-1 libopenmpt vulnerabilities

It was discovered that OpenMPT incorrectly handled certain files. A remote attacker could possibly use this issue to cause a denial of service or other unspecified impact...

CVE-2021-22638

Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds read while processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution...

CVE-2021-22670

An uninitialized pointer may be exploited in Fatek FvDesigner Version 1.5.76 and prior while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution...

CVE-2021-22662

A use after free issue has been identified in Fatek FvDesigner Version 1.5.76 and prior in the way the application processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution...

CVE-2021-22666

Fatek FvDesigner Version 1.5.76 and prior is vulnerable to a stack-based buffer overflow while project files are being processed, allowing an attacker to craft a special project file that may permit arbitrary code execution...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2021-1135)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-22653

Multiple out-of-bounds write issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite versions prior to 4.0.10.0...

CVE-2021-22639

An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite versions prior to 4.0.10.0...

CVE-2021-20189

There is a flaw in ImageMagick's MagickCore/gem.c version 7 and magick/gem.c version 6 files in GenerateDifferentialNoise. An attacker who is able to input a specially crafted file to ImageMagick for processing could cause a division-by-zero, which could affect application availability...

CVE-2020-27287

Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

Out-of-bounds

Delta Electronics DOPSoft Version 4.0.8.21 and prior is vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

About the security content of tvOS 14.3

About the security content of tvOS 14.3 This document describes the security content of tvOS 14.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...