CVE-2020-3907

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory...

Input validation

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory...

Input validation

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory...

Input validation

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2020-3912

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2020-3912

CVE-2020-3912 is a macOS Catalina Bluetooth out-of-bounds read vulnerability addressed by improved input validation. Affected: macOS Catalina versions prior to 10.15.4 (Bluetooth component). Root cause: an out-of-bounds read due to improper input handling. Impact (as stated): local attacker could...

CVE-2020-3908

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2020-3907

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2020-3907

CVE-2020-3907 affects macOS Bluetooth on macOS Catalina (and related updates). The issue is an out-of-bounds read caused by insufficient input validation, which could allow a local user to terminate the system unexpectedly or read kernel memory. Apple’s security content notes the fix in macOS Cat...

CVE-2018-7757

Memory leak in the sassmpgetphyevents function in drivers/scsi/libsas/sasexpander.c in the Linux kernel allows local users to cause a denial of service kernel memory exhaustion via multiple read accesses to files in the /sys/class/sasphy directory...

CVE-2020-3908: Out-of-bounds Read

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2020-3912: Out-of-bounds Read

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2020-3907: Out-of-bounds Read

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory...

PT-2020-17788

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.4 Description An out-of-bounds read issue was addressed with improved input validation. A local user may be able to cause unexpected system termination or read kernel memory. Recommendations For versions prior to...

PT-2020-17789

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.4 Description An out-of-bounds read issue was addressed with improved input validation, which could allow a local user to cause unexpected system termination or read kernel memory. Recommendations For versions pri...

PT-2020-17787

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.4 Description An out-of-bounds read issue was addressed with improved input validation. A local user may be able to cause unexpected system termination or read kernel memory. Recommendations For versions prior to...

kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command

A flaw was found in the Linux kernel's implementation of the Bluetooth Human Interface Device Protocol HIDP. A local attacker with access permissions to the Bluetooth device can issue an IOCTL which will trigger the dohidpsockioctl function in net/bluetooth/hidp/sock.c.c. This function can leak...

kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service

A flaw that allowed an attacker to leak kernel memory was found in the network subsystem where an attacker with permissions to create tun/tap devices can create a denial of service and panic the system...

kernel: memory leak in register_queue_kobjects() in net/core/net-sysfs.c leads to denial of service

A flaw that allowed an attacker to leak kernel memory was found in the network subsystem where an attacker with permissions to create tun/tap devices can create a denial of service and panic the system...

CVE-2020-8835

In the Linux kernel 5.5.0 and newer, the bpf verifier kernel/bpf/verifier.c did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the...