2 matches found
CVE-2024-56555
In the Linux kernel, the following vulnerability has been resolved: binder: fix OOB in binderaddfreezework In binderaddfreezework we iterate over the proc-nodes with the proc-innerlock held. However, this lock is temporarily dropped to acquire the node-lock first lock nesting order. This can race...
CVE-2024-40815
CVE-2024-40815 describes a race condition addressed by added validation. Apple states the issue is fixed in macOS Ventura 13.6.8, macOS Sonoma 14.6, iOS 17.6/iPadOS 17.6, watchOS 10.6, and tvOS 17.6. A malicious attacker with arbitrary read/write access could potentially bypass Pointer Authentica...