Antonio Zekic

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 15 **Description** The issue is related to improved memory handling, which may allow an app to cause unexpected system termination or corrupt kernel memory. **Recommendations** For versions prior to 15, update to macOS Sequoia 15 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 17 iPadOS versions prior to 17 **Description** The issue is related to improved memory handling and may allow an app to execute arbitrary code with kernel privileges. It is associated with a buffer overflow in the GPU driver of the operating systems. **Recommendations** For iOS versions prior to 17, update to iOS 17 to resolve the issue. For iPadOS versions prior to 17, update to iPadOS 17 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 15.6 Apple iPadOS versions prior to 15.6 Apple tvOS versions prior to 15.6 Apple watchOS versions prior to 8.7 **Description** The issue allows an app to potentially disclose kernel memory due to inadequate memory handling. This has been addressed with improved memory handling. **Recommendations** For iOS versions prior to 15.6, update to iOS 15.6 to resolve the issue. For iPadOS versions prior to 15.6, update to iPadOS 15.6 to resolve the issue. For tvOS versions prior to 15.6, update to tvOS 15.6 to resolve the issue. For watchOS versions prior to 8.7, update to watchOS 8.7 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.1 **Description** An out-of-bounds access issue was addressed with improved bounds checking, allowing an app to potentially execute arbitrary code with kernel privileges. **Recommendations** For versions prior to 13.1, update to macOS Ventura 13.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple tvOS versions prior to 16 Apple iOS versions prior to 16 Apple watchOS versions prior to 9 **Description** The issue allows an app to potentially execute arbitrary code with kernel privileges due to insufficient checks. **Recommendations** For Apple tvOS versions prior to 16, update to tvOS 16 to resolve the issue. For Apple iOS versions prior to 16, update to iOS 16 to resolve the issue. For Apple watchOS versions prior to 9, update to watchOS 9 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16 macOS versions prior to Ventura 13 **Description** A memory corruption issue was addressed with improved state management. This issue may allow an app to cause a denial-of-service. **Recommendations** For iOS versions prior to 16, update to iOS 16 to resolve the issue. For macOS versions prior to Ventura 13, update to macOS Ventura 13 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13 **Description** An out-of-bounds read issue was addressed with improved input validation, which may allow an app to disclose kernel memory. **Recommendations** For versions prior to 13, update to macOS Ventura 13 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.6 iPadOS versions prior to 15.6 tvOS versions prior to 15.6 macOS Monterey versions prior to 12.5 **Description** The issue allows an app to potentially disclose kernel memory due to inadequate memory handling. **Recommendations** For iOS versions prior to 15.6, update to iOS 15.6 or later. For iPadOS versions prior to 15.6, update to iPadOS 15.6 or later. For tvOS versions prior to 15.6, update to tvOS 15.6 or later. For macOS Monterey versions prior to 12.5, update to macOS Monterey 12.5 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.6 iPadOS versions prior to 15.6 macOS Big Sur versions prior to 11.6.8 watchOS versions prior to 8.7 tvOS versions prior to 15.6 macOS Monterey versions prior to 12.5 **Description** The issue was addressed with improved memory handling. An app may be able to disclose kernel memory. **Recommendations** For iOS versions prior to 15.6, update to iOS 15.6 or later. For iPadOS versions prior to 15.6, update to iPadOS 15.6 or later. For macOS Big Sur versions prior to 11.6.8, update to macOS Big Sur 11.6.8 or later. For watchOS versions prior to 8.7, update to watchOS 8.7 or later. For tvOS versions prior to 15.6, update to tvOS 15.6 or later. For macOS Monterey versions prior to 12.5, update to macOS Monterey 12.5 or later.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 8.6 tvOS versions prior to 15.5 iOS versions prior to 15.5 iPadOS versions prior to 15.5 **Description** A use after free issue was addressed with improved memory management, which may allow an application to execute arbitrary code with kernel privileges. **Recommendations** For watchOS versions prior to 8.6, update to watchOS 8.6 to resolve the issue. For tvOS versions prior to 15.5, update to tvOS 15.5 to resolve the issue. For iOS versions prior to 15.5, update to iOS 15.5 to resolve the issue. For iPadOS versions prior to 15.5, update to iPadOS 15.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.4 macOS Big Sur versions prior to 11.6.6 macOS Catalina versions prior to Security Update 2022-004 **Description** A memory corruption issue was addressed with improved input validation, allowing a malicious application to potentially execute arbitrary code with kernel privileges. **Recommendations** For macOS versions prior to 12.4, update to macOS Monterey 12.4 or later. For macOS Big Sur versions prior to 11.6.6, update to macOS Big Sur 11.6.6 or later. For macOS Catalina versions prior to Security Update 2022-004, apply Security Update 2022-004.

**Name of the Vulnerable Software and Affected Versions** LibTIFF master branch **Description** The issue is related to an out-of-bounds read in the `LZWDecode` function in `libtiff/tif lzw.c:619`, allowing attackers to cause a denial-of-service via a crafted tiff file. This can be exploited by a remote attacker to disrupt service. **Recommendations** For users that compile libtiff from sources, the fix is available with commit b4e79bfa. As a temporary workaround, consider disabling the `LZWDecode` function until a patch is available. Restrict access to crafted tiff files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.2 **Description** A memory corruption issue was addressed with improved memory handling, allowing a malicious application to potentially execute arbitrary code with kernel privileges. **Recommendations** For versions prior to 12.2, update to macOS Monterey 12.2 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.0.1 macOS Big Sur versions prior to 11.6.1 Security Update versions prior to 2021-007 Catalina **Description** A memory corruption issue was addressed with improved state management. A malicious application may be able to execute arbitrary code with kernel privileges. **Recommendations** For macOS versions prior to 12.0.1, update to macOS Monterey 12.0.1. For macOS Big Sur versions prior to 11.6.1, update to macOS Big Sur 11.6.1. For Security Update versions prior to 2021-007 Catalina, apply Security Update 2021-007 Catalina.