462 matches found
CVE-2014-4378
CoreGraphics 정보 노출 - CVE-2014-4378 이 글은 iOS 7.1.x에서 MobileSafari의 익스플로잇 가능성을 탐구합니다. 조작된 PDF 파일을 HTML 이미지로 사용하면 메모리 레이아웃에 대한 정보를 브라우저 Javascript 인터프리터로 유출할 수 있습니다. Apple CoreGraphics 라이브러리가 PDF 콘텐츠 스트림에 포함된 인라인 이미지의 색상 공간 사양을 구문 분석할 때 입력 검증에 실패합니다. 이 문제는 이 라이브러리와 연결된 모든 애플리케이션에서 다른 취약점을 익스플로잇하는 공격...
CVE-2014-4377
CoreGraphics 메모리 손상 - CVE-2014-4377 Apple CoreGraphics 라이브러리가 PDF XObject의 색상 공간 사양을 파싱할 때 입력을 제대로 검증하지 않아 힙 오버플로우 조건이 발생합니다. 영향을 받는 프레임워크와 연결된 모든 애플리케이션에서 작은 힙 메모리 할당이 입력의 제어된 데이터로 오버플로우될 수 있습니다. 조작된 PDF 파일을 HTML 이미지로 사용하고 정보 유출 취약점과 결합하면 이 문제는 임의 코드 실행으로 이어집니다. IOS7.1.x의 MobileSafari에 대한 완전히 10...
CVE-2014-4377
CydiaSubstrate 기반 CVE-2014-4377 수정 github.com/feliam/cve-2014-4377 및 http://blog.binamuse.com/2014/09/coregraphics-memory-corruption.html 참조...
CVE-2014-4481
CoreGraphics CCITT 메모리 손상 - CVE-2014-4481 Apple CoreGraphics 프레임워크는 CCITT group 3 인코딩 데이터를 파싱할 때 입력값을 검증하지 못하여 힙 오버플로 조건이 발생합니다. 작은 힙 메모리 할당이 입력에서 비롯된 제어된 데이터로 오버플로되어 Mobile Safari 컨텍스트에서 임의 코드 실행으로 이어질 수 있습니다. 요약 제목: Apple CoreGraphics 메모리 손상 CVE 이름: CVE-2014-4481 영구 링크:...
Vulnerability hidden in Apple CoreGraphics
Apple has identified a vulnerability in CoreGraphics on iOS, iPadOS, and macOS. This vulnerability involves an out-of-bounds write operation within the CoreGraphics component. An attacker can exploit this vulnerability by processing specially crafted files, which may lead to the execution of...
Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path
Security researchers have published the first public proof-of-concept for CVE-2026-86950 , an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The trigger is a malicious PDF with a crafted embedded font that crashes unpatched iPhones and Macs...
The vulnerability of the Apple CoreGraphics system framework in operating systems such as iOS, MacOS, and iPadOS allows attackers to execute arbitrary code.
The vulnerability of the Apple CoreGraphics system framework in iOS, MacOS, and iPadOS relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Apple Multiple Products Out-of-Bounds Write Vulnerability
Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution...
Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks
Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE-2026-86950 , refers to an out-of-bounds write impacting the CoreGraphics component that could lead...
CVE-2026-86950
creationtimestamp| type| source ---|---|--- 2026-09-28 17:18:01+00:00| seen| https://thehackernews.com/2026/09/apple-patches-coregraphics-flaw.html 2026-09-28 19:11:35+00:00| seen| https://infosec.exchange/users/applsec/statuses/117350248943713236 2026-09-28 19:11:37+00:00| seen|...
About the security content of macOS Sequoia 15.8.1
About the security content of macOS Sequoia 15.8.1 This document describes the security content of macOS Sequoia 15.8.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
VulnCheck KEV: CVE-2026-86950
Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution...
PT-2026-102337
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7.1 iPadOS versions prior to 26.7.1 macOS Sequoia versions prior to 15.8.1 macOS Tahoe versions prior to 26.7.1 Description An out-of-bounds write issue exists in the Apple CoreGraphics framework, which is used for 2D...
About the security content of iOS 26.7.1 and iPadOS 26.7.1
About the security content of iOS 26.7.1 and iPadOS 26.7.1 This document describes the security content of iOS 26.7.1 and iPadOS 26.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
About the security content of macOS Tahoe 26.7.1
About the security content of macOS Tahoe 26.7.1 This document describes the security content of macOS Tahoe 26.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...
MiracleLinux 4 : freetype-2.3.11-6.AXS4.8 (AXSA:2012-24:01)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-24:01 advisory. The FreeType engine is a free and portable font rendering engine, developed to provide advanced font support for a variety of platforms and environments...
CVE-2005-1722
Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands into root sessions...
EUVD-2005-1728
Malware in sbrugna...