Apple tvOS Buffer Error Vulnerability

Apple tvOS is an operating system for Smart TVs from Apple Inc. in the United States. tvOS suffers from a buffer error vulnerability that stems from a boundary condition in ImageIO. A remote attacker exploiting this vulnerability could create a specially crafted file, trick a victim into opening...

About the security content of watchOS 7.5

About the security content of watchOS 7.5 This document describes the security content of watchOS 7.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

PT-2021-6011

Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.4 tvOS versions prior to 14.6 watchOS versions prior to 7.5 iOS versions prior to 14.6 iPadOS versions prior to 14.6 Description The issue is related to the processing of maliciously crafted images, which may lead to...

PT-2021-5998

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.6 iPadOS versions prior to 14.6 tvOS versions prior to 14.6 watchOS versions prior to 7.5 macOS Big Sur versions prior to 11.4 macOS Mojave versions prior to Security Update 2021-004 macOS Catalina versions prior to...

PT-2021-5439

Name of the Vulnerable Software and Affected Versions Apple tvOS versions prior to 14.6 Apple iOS versions prior to 14.6 Apple iPadOS versions prior to 14.6 Apple macOS versions prior to 11.4 Apple watchOS versions prior to 7.5 Apple macOS Mojave versions prior to Security Update 2021-004 Apple...

Apple macOS ImageIO DDS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

PT-2021-6000

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 14.6 Apple iPadOS versions prior to 14.6 Apple tvOS versions prior to 14.6 Apple watchOS versions prior to 7.5 Apple macOS versions prior to 11.4 Apple macOS versions prior to Security Update 2021-003 Catalina...

Apple macOS Buffer Error Vulnerability

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A buffer error vulnerability exists in macOS that originates from a boundary condition within the ImageIO component. The following products and versions are affected: macOS: 11.0 20A2411, 11.0.1 20B29, 11.0.1...

Apple macOS Input Verification Vulnerability

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in macOS, which arises from insufficient user-supplied input validation within the ImageIO component. The following products and versions are affected: macOS: 11...

Apple macOS Input Verification Vulnerability

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in macOS, which arises from insufficient user-supplied input validation within the ImageIO component. The following products and versions are affected: macOS: 11...

Apple macOS Input Verification Vulnerability

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in macOS, which stems from insufficient validation of user-supplied input within the ImageIO component. 10.14.4 18E226, 10.14.4 18E227, 10.14.5 18F132, 10.14.6...

Apple macOS Buffer Error Vulnerability

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A buffer error vulnerability exists in macOS that originates from a boundary error within the ImageIO component. The following products and versions are affected: macOS: 11.0 20A2411, 11.0.1 20B29, 11.0.1...

Apple macOS Injection Vulnerability

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An injection vulnerability exists in macOS due to insufficient validation of user-supplied input within the ImageIO component. The following products and versions are affected: macOS: 11.0 20A2411, 11.0.1...

PT-2021-5286

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 14.5 Apple iPadOS versions prior to 14.5 Apple watchOS versions prior to 7.4 Apple tvOS versions prior to 14.5 Description The issue is related to the processing of maliciously crafted files, which may lead to...

Apple ImageIO Resource Management Error Vulnerability (CNVD-2021-17223)

Apple ImageIO is an Apple component necessary for parsing and writing image data in IOS mobile devices. Apple ImageIO suffers from a resource management error vulnerability that stems from a boundary condition when processing image files in the curl implementation of the ImageIO component for...

PT-2021-6001

Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.4 tvOS versions prior to 14.6 watchOS versions prior to 7.5 iOS versions prior to 14.6 iPadOS versions prior to 14.6 Description Processing a maliciously crafted image may lead to disclosure of user information. The...

PT-2021-5394 · Apple · Imageio +5

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.3 iOS versions prior to 14.5 iPadOS versions prior to 14.5 watchOS versions prior to 7.4 tvOS versions prior to 14.5 Description: The issue is related to an out-of-bounds write in the ImageIO component, which can be...

imageio:fuzz_read: Uncaught exception in read

Detailed Report: https://oss-fuzz.com/testcase?key=5635611575844864 Project: imageio Fuzzing Engine: libFuzzer Fuzz Target: fuzzread Job Type: libfuzzerasanimageio Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: read loadread load Sanitizer: address ASAN Crash...

imageio:fuzz_read: Uncaught exception in chunk_IHDR

Detailed Report: https://oss-fuzz.com/testcase?key=6432466216812544 Project: imageio Fuzzing Engine: libFuzzer Fuzz Target: fuzzread Job Type: libfuzzerasanimageio Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: chunkIHDR call open Sanitizer: address ASAN Crash...

ImageIO Code Execution

The vulnerability of the ImageIO component in operating systems such as tvOS, iOS, iPadOS, watchOS, and iCloud for Windows operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...