CVE-2022-32960

HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for card number. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate...

CVE-2022-32962

HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrupt memory and execute arbitrary code, manipulate system data or terminate service...

Stack overflow

HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for OS information. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipula...

Stack overflow

HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for token information. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code,...

Double free

HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrupt memory and execute arbitrary code, manipulate system data or terminate service...

Stack overflow

HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for card number. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate...

CVE-2022-32962 HiCOS’ client-side citizen digital certificate - Double Free

HiCOS’ client-side citizen certificate component has a double free vulnerability. An unauthenticated physical attacker can exploit this vulnerability to corrupt memory and execute arbitrary code, manipulate system data or terminate service...

CVE-2022-32962

CVE-2022-32962 affects HiCOS’ client-side citizen certificate component. The vulnerability is a double free that can be exploited by an unauthenticated physical attacker to corrupt memory and execute arbitrary code, manipulate system data, or terminate service. Documents consistently describe the...

CVE-2022-32961 HiCOS’ client-side citizen digital certificate - Stack Buffer Overflow

HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for token information. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code,...

CVE-2022-32961

CVE-2022-32961 concerns HICOS’ client-side citizen digital certificate component, which has a stack-based buffer overflow when reading an IC card due to insufficient validation of token information parameter length. The vulnerability can be exploited by an unauthenticated, physical attacker to ex...

CVE-2022-32960

CVE-2022-32960 affects the HiCOS client-side citizen digital certificate component. The vulnerability is a stack-based buffer overflow caused by insufficient validation of the card number parameter when reading an IC card. An unauthenticated physical attacker can exploit this to execute arbitrary...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is the 17th major release of macOS, Apple's operating system for the MAC, from Apple USA. Apple macOS Big Sur suffers from a buffer error vulnerability that stems from the fact that processing a maliciously crafted AppleScript binary may result in the unexpected termination or...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is the 17th major release of macOS, Apple's operating system for the MAC, from Apple USA. Apple macOS Big Sur suffers from a buffer error vulnerability that stems from the fact that processing a maliciously crafted AppleScript binary may result in the unexpected termination or...

PT-2022-21519 · Apple · Macos Catalina +7

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 15.6 Apple iPadOS versions prior to 15.6 Apple macOS Big Sur versions prior to 11.6.8 Apple watchOS versions prior to 8.7 Apple tvOS versions prior to 15.6 Apple macOS Monterey versions prior to 12.5 Apple macOS...

PT-2022-21608 · Hicos · Hicos

Name of the Vulnerable Software and Affected Versions: HiCOS client-side citizen digital certificate component affected versions not specified Description: The issue is a stack-based buffer overflow vulnerability in the client-side citizen digital certificate component when reading an IC card, du...

About the security content of macOS Big Sur 11.6.8

About the security content of macOS Big Sur 11.6.8 This document describes the security content of macOS Big Sur 11.6.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of macOS Monterey 12.5

About the security content of macOS Monterey 12.5 This document describes the security content of macOS Monterey 12.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

多款Apple产品 缓冲区错误漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS and iPadOS, which can be exploited by remote attackers to cause...

PT-2022-21511 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 tvOS versions prior to 15.6 iOS versions prior to 15.6 iPadOS versions prior to 15.6 Description: The issue allows an app to potentially cause unexpected system termination or write kernel memory due to inadequate...

Apple iOS 和 iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS and iPadOS that originates from an application that could cause the syste...