Stack overflow

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution...

CVE-2021-30789

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution...

Integer overflow

An integer overflow was addressed through improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution...

CVE-2021-30789

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution...

CVE-2021-30789

CVE-2021-30789 concerns an out-of-bounds read in font-file processing that could lead to arbitrary code execution. Public sources (NVD/Red Hat advisories) state the issue is addressed by input-validation improvements and is fixed in Apple platforms: iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS...

CVE-2021-30760

An integer overflow was addressed through improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution...

Apple macOS Big Sur Buffer Overflow Vulnerability (CNVD-2021-102842)

Apple macOS Big Sur is a mobile application app from Apple Inc. Apple macOS Big Sur is vulnerable to a buffer overflow vulnerability that could be exploited by remote attackers to create a specially crafted font file and trick victims into opening it, triggering an out-of-bounds read error and...

Apple macOS Big Sur Buffer Overflow Vulnerability (CNVD-2021-102843)

Apple macOS Big Sur is a mobile application app from Apple, Inc. Apple macOS Big Sur is vulnerable to a buffer overflow vulnerability that could be exploited by remote attackers to create a specially crafted font file and trick victims into opening it, triggering an out-of-bounds read error and...

About the security content of iOS 14.7 and iPadOS 14.7

About the security content of iOS 14.7 and iPadOS 14.7 This document describes the security content of iOS 14.7 and iPadOS 14.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

Apple macOS 缓冲区错误漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A buffer error vulnerability exists in Apple macOS, which can be exploited by a remote attacker to create a specially crafted font file, trick the victim into opening it, trigger a stack-based buffer overflow...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in Apple macOS, which can be exploited by a remote attacker to trigger an integer overflow and execute arbitrary code on the target system via a specially crafte...

Apple macOS 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple, Inc. Apple macOS Big Sur is vulnerable to a buffer overflow vulnerability that could be exploited by remote attackers to create a specially crafted font file and trick victims into opening it, triggering an out-of-bounds read error and...

Apple macOS Big Sur 信息泄露漏洞

Apple macOS Big Sur is a mobile application app from Apple Inc. Apple macOS Big Sur is vulnerable to a buffer overflow vulnerability that could be exploited by remote attackers to create a specially crafted font file and trick victims into opening it, triggering an out-of-bounds read error and...

Apple macOS 缓冲区错误漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in macOS, which can be exploited by a remote attacker to create a specially crafted font file, trick a victim into opening it, trigger a stack-based buffer overflow, and execut...

Denial Of Service (DoS)

freetype is vulnerable to denial of service. A NULL pointer dereference in the InsGETVARIATION function in ttinterp.c allows an attacker to crash the application via a malicious font file...

The vulnerability of the ReadCAPTIONImage function in the coders/caption.c component of the console image editing tool ImageMagick, which is related to infinite loop execution, allows a hacker to cause a service failure.

The vulnerability of the ReadCAPTIONImage function in the coders/caption.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker who operates remotely to cause a service failure using a specially creat...

CVE-2021-0567

In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

CVE-2021-0567

In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...

VMware Workstation ThinPrint TTCHeader Integer Overflow Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

PT-2021-4729 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 14.6 Apple iOS versions prior to 14.6 Apple iPadOS versions prior to 14.6 Apple macOS versions prior to 11.4 Apple watchOS versions prior to 7.5 macOS Catalina versions prior to Security Update 2021-004 macOS Moja...