APPLE OS X AND IOS X509 CERTIFICATE PARSING NAME CONSTRAINTS REMOTE CODE EXECUTION VULNERABILITY

Apple macOS x509 certificate parsing vulnerability allows remote code execution via nameConstraints extension fields. Attackers can trigger this by presenting malicious certificates to clients in various scenarios (e.g., visiting HTTPS sites, connecting to mail servers, importing certificates). The vulnerability exists in the parsing function `parseGeneralSubtrees` in `/System/Library/Frameworks/Security.framework/Versions/A/Security`. A memory corruption occurs when processing failed.