CVE-2021-31319

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by an Integer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious...

CVE-2021-31320

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by a Heap Buffer Overflow in the VGradientCache::generateGradientColorTable function of their custom fork of the rlottie library. A remote attacker might be able to overwrite heap memory out-of-bounds on a victim...

UBUNTU-CVE-2021-31319

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by an Integer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious...

UBUNTU-CVE-2021-31323

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by a Heap Buffer Overflow in the LottieParserImpl::parseDashProperty function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via ...

webkitgtk: Input validation issue leading to cross site scripting attack

An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross sit...

PT-2021-19239 · Telegram +2 · Telegram Ios +4

Name of the Vulnerable Software and Affected Versions: Telegram Android versions prior to 7.1.0 2090 Telegram iOS versions prior to 7.1 Telegram macOS versions prior to 7.1 Description: The issue is related to an Integer Overflow in the LOTGradient::populate function of the custom fork of the...

A week in security (May 10 – 16)

Last week on Malwarebytes Labs, we watched and reported on the Colonial Pipeline ransomware attack as developments of its story unfolded. This attack triggered the White House to refine a planned Executive Order on cybersecurity. We also profiled DarkSide, the ransomware responsible for the...

iPhone calendar spam attacks on the rise

Recently, we have seen an increasing number of reports from iPhone users about their calendars filling up with junk events. These events are most often either pornographic in nature, or claim that the device has been infected or hacked, and in all cases they contain malicious links. This phenomen...

The vulnerability of the web page rendering module in the WebKitGTK+ operating system for iOS, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering module in the WebKitGTK+ operating system for iOS lies in the escape of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the web page rendering module in the WebKitGTK+ operating system for iOS, related to the use after release, allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering module in the WebKitGTK+ operating system for iOS is related to its use after release. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

iPhone Hack Allegedly Used to Spy on China’s Uyghurs

In 2019, a Chinese security researcher working with the internet security and antivirus company Qihoo 360 unveiled an intricately woven exploit: One that would allegedly let a remote attacker easily jailbreak an iPhone X iOS 12.1. The researcher, Qixun Zhao, dubbed the exploit Chaos, for good...

IFTTT eWeLink 安全漏洞

IFTTT eWeLink is an IFTTT open source application. It provides remote switching of fans and lights, control of wind speed and dimming of lights. A security vulnerability exists in the eWeLink mobile application version 4.9.2 and earlier for Android and version 4.9.1 and earlier for iOS, which can...

Apple Fixes Zero‑Day Security Bugs Under Active Attack

Apple has issued out-of-band patches for critical security issues affecting iPad, iPhone and iPod, which could allow remote code execution RCE and other attacks, completely compromising users’ systems. And, the computing giant thinks all of them may have already been exploited in the wild. Three ...

$4 billion lawsuit claims Google tracked iPhone users activities

By Deeba Ahmed The lawsuit alleges that Google secretly tracked iPhone users’ internet activities. Here's what the details of the lawsuit have revealed so far. This is a post from HackRead.com Read the original post: $4 billion lawsuit claims Google tracked iPhone users activities...

How to use iOS 14.5 privacy settings to turn off iPhone apps tracking

By Deeba Ahmed Using iPhone? You can now protect your data and location from being tracked by apps on your device with just a tap, thanks to iOS 14.5. This is a post from HackRead.com Read the original post: How to use iOS 14.5 privacy settings to turn off iPhone apps tracking...

CVE-2021-20715

Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...

Apple Kernel 缓冲区错误漏洞

The Apple Kernel is the kernel for Apple devices from Apple, Inc. A security vulnerability exists in Apple Kernel, which is caused by an input out-of-bounds. The following products and versions are affected: iPhone 6s and later, iPad Pro all models, iPad Air 2 and later, iPad 5th generation and...

Apple iOS 安全漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS, where a local user may be able to create or modify privileged files. The following products and versions are affected: iPhone 6s and later, iPad Pro all models, iPad Air 2 an...

Apple Kernel 缓冲区错误漏洞

The Apple Kernel is the kernel for Apple devices from Apple Inc. in the United States. A security vulnerability exists in the Apple Kernel, which can be exploited by a local user to read kernel memory. The following products and versions are affected: iPhone 6s and later, iPad Pro all models, iPa...

Apple Kernel 安全漏洞

The Apple Kernel is the kernel for Apple devices from Apple, Inc. A security vulnerability exists in the Apple Kernel, which originates in state management. The following products and versions are affected: iPhone 6s and later, iPad Pro all models, iPad Air 2 and later, iPad 5th generation and...