CVE-2024-44220

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2. Parsing a maliciously crafted video file may lead to unexpected system termination...

CVE-2024-44220

CVE-2024-44220 affects Apple macOS (Sequoia 15.2 and Sonoma 14.7.2) where parsing a maliciously crafted video file could cause an unexpected system termination due to a memory handling issue. The vulnerability is addressed via improved memory handling in the patched releases. Connected sources (R...

CVE-2024-54506

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware...

CVE-2024-54506

CVE-2024-54506 affects macOS Sequoia prior to 15.2 due to an out-of-bounds access in DCP firmware. The issue can cause unexpected termination or arbitrary code execution if triggered. The NVD entry and Apple security content identify the fix as part of macOS Sequoia 15.2. Affected component is DC...

CVE-2024-54506

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware...

CVE-2024-44245

The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3, visionOS 2.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, macOS Sonoma 14.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2024-44245

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, visionOS 2.2. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2024-44245

CVE-2024-44245 affects Apple systems where a memory handling weakness could allow an app to cause unexpected system termination or corrupt kernel memory. The issue has been addressed in updates: iPadOS 17.7.3, iPadOS 18.2, iOS 18.2, visionOS 2.2, macOS Sequoia 15.2, and macOS Sonoma 14.7.2. Affec...

CVE-2024-44242

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware...

CVE-2024-44242

CVE-2024-44242 affects Apple iOS and iPadOS with a DCP firmware issue due to insufficient bounds checks. Affected software: iOS before 18.1 and iPadOS before 18.1 (Apple states the fix is in iOS 18.1/iPadOS 18.1). Impact per documents: attacker could trigger unexpected system termination or arbit...

PT-2024-31072

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.3 visionOS versions prior to 2.2 macOS Sequoia versions prior to 15.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 macOS Sonoma versions prior to 14.7.2 Description: The issue was addressed with...

PT-2025-35160 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.2 Description: The issue involves improved memory handling. Parsing a maliciously crafted file may lead to unexpected application termination. Recommendations: Update to macOS version 15.2 to resolve the issue...

About the security content of macOSSonoma14.7.2

About the security content of macOSSonoma14.7.2 This document describes the security content of macOS Sonoma 14.7.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

GHSA-9RMP-2568-59RV rPGP Panics on Malformed Untrusted Input

During a security audit, Radically Open Security discovered several reachable edge cases which allow an attacker to trigger rpgp crashes by providing crafted data. Impact When processing malformed input, rpgp can run into Rust panics which halt the program. This can happen in the following...

SUSE CVE-2024-53110

In the Linux kernel, the following vulnerability has been resolved: vpvdpa: fix idtable array not null terminated error Allocate one extra virtiodeviceid as null terminator, otherwise vdpamgmtdevgetclasses may iterate multiple times and visit undefined memory...

UBUNTU-CVE-2024-53110

In the Linux kernel, the following vulnerability has been resolved: vpvdpa: fix idtable array not null terminated error Allocate one extra virtiodeviceid as null terminator, otherwise vdpamgmtdevgetclasses may iterate multiple times and visit undefined memory...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the idtable array in the vpvdpa component not being terminated with a null terminator, causing the...

GHSA-93WW-43RR-79V3 Keycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination

A vulnerability was found in Keycloak. Deployments of Keycloak with a reverse proxy not using pass-through termination of TLS, with mTLS enabled, are affected. This issue may allow an attacker on the local network to authenticate as any user or client that leverages mTLS as the authentication...

Keycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination

A vulnerability was found in Keycloak. Deployments of Keycloak with a reverse proxy not using pass-through termination of TLS, with mTLS enabled, are affected. This issue may allow an attacker on the local network to authenticate as any user or client that leverages mTLS as the authentication...

keycloak-core: mTLS passthrough

A vulnerability was found in Keycloak. Deployments of Keycloak with a reverse proxy not using pass-through termination of TLS, with mTLS enabled, are affected. This issue may allow an attacker on the local network to authenticate as any user or client that leverages mTLS as the authentication...