Chijin Zhou

**Name of the Vulnerable Software and Affected Versions** PostgreSQL version 12.2 **Description** The issue is related to a buffer copy without checking the size of the input data in the signal handler for SIGHUP signals in PostgreSQL. This could potentially allow a remote attacker to cause a denial of service. However, it is noted that this issue is disputed by the vendor because untrusted users cannot send SIGHUP signals; they can only be sent by a PostgreSQL superuser, a user with pg reload conf access, or a user with sufficient privileges at the OS level. **Recommendations** For PostgreSQL version 12.2, consider restricting access to the signal handler for SIGHUP signals to only trusted users, such as PostgreSQL superusers or users with pg reload conf access, to minimize the risk of exploitation. As a temporary workaround, consider disabling the signal handler for SIGHUP signals until a patch is available or the issue is otherwise resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apple tvOS versions prior to 15.5 Apple iOS versions prior to 15.5 Apple iPadOS versions prior to 15.5 Apple watchOS versions prior to 8.6 Apple macOS Monterey versions prior to 12.4 Apple Safari versions prior to 15.5 **Description** A use after free issue was addressed with improved memory management. This issue may lead to arbitrary code execution when processing maliciously crafted web content. The vulnerability is related to the use of memory after it has been freed, which can be exploited by a remote attacker to execute arbitrary code or cause a denial of service. **Recommendations** For Apple tvOS versions prior to 15.5, update to tvOS 15.5 to resolve the issue. For Apple iOS versions prior to 15.5, update to iOS 15.5 to resolve the issue. For Apple iPadOS versions prior to 15.5, update to iPadOS 15.5 to resolve the issue. For Apple watchOS versions prior to 8.6, update to watchOS 8.6 to resolve the issue. For Apple macOS Monterey versions prior to 12.4, update to macOS Monterey 12.4 to resolve the issue. For Apple Safari versions prior to 15.5, update to Safari 15.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.5 iPadOS versions prior to 15.5 macOS Monterey versions prior to 12.4 tvOS versions prior to 15.5 watchOS versions prior to 8.6 **Description** A use after free issue was addressed with improved memory management. This issue may lead to arbitrary code execution when processing maliciously crafted web content. The vulnerability is related to the WebKit modules, which can allow a remote attacker to execute arbitrary code by exploiting the use after free issue. **Recommendations** For iOS versions prior to 15.5, update to iOS 15.5 or later. For iPadOS versions prior to 15.5, update to iPadOS 15.5 or later. For macOS Monterey versions prior to 12.4, update to macOS Monterey 12.4 or later. For tvOS versions prior to 15.5, update to tvOS 15.5 or later. For watchOS versions prior to 8.6, update to watchOS 8.6 or later.

**Name of the Vulnerable Software and Affected Versions** WebKitGTK versions through 2.36.0 WPE WebKit versions through 2.36.0 **Description** The issue is related to a heap-based buffer overflow in the `WebCore::TextureMapperLayer::setContentsLayer` function, located in `WebCore/platform/graphics/texmap/TextureMapperLayer.cpp`, which is part of the WebKitGTK and WPE WebKit modules for rendering web pages. This can be exploited by a remote attacker to execute arbitrary code or cause a denial of service. **Recommendations** For WebKitGTK versions through 2.36.0, update to a version later than 2.36.0 to resolve the issue. For WPE WebKit versions through 2.36.0, update to a version later than 2.36.0 to resolve the issue. As a temporary workaround, consider disabling the `WebCore::TextureMapperLayer::setContentsLayer` function until a patch is available.

Name of the Vulnerable Software and Affected Versions: WebKitGTK versions prior to 2.32.4 Description: The issue is related to incorrect memory allocation in the `WebCore::ImageBufferCairoImageSurfaceBackend::create` function, which can lead to a segmentation violation and cause the application to crash. Recommendations: For versions prior to 2.32.4, update to version 2.32.4 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: WebKitGTK versions prior to 2.32.4 Description: The issue is related to a use-after-free in WebCore::ContainerNode::firstChild. This is a different vulnerability than the one previously identified. Recommendations: For versions prior to 2.32.4, update to version 2.32.4 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** tvOS versions prior to 15.2 macOS Monterey versions prior to 12.1 Safari versions prior to 15.2 iOS versions prior to 15.2 iPadOS versions prior to 15.2 watchOS versions prior to 8.3 **Description** The issue is related to a use after free problem, which can be exploited by a remote attacker to execute arbitrary code when processing malicious web content. This can happen due to improper memory management. **Recommendations** For tvOS versions prior to 15.2, update to tvOS 15.2 or later. For macOS Monterey versions prior to 12.1, update to macOS Monterey 12.1 or later. For Safari versions prior to 15.2, update to Safari 15.2 or later. For iOS versions prior to 15.2, update to iOS 15.2 or later. For iPadOS versions prior to 15.2, update to iPadOS 15.2 or later. For watchOS versions prior to 8.3, update to watchOS 8.3 or later.

**Name of the Vulnerable Software and Affected Versions** macOS Monterey versions prior to 12.0.1 iOS versions prior to 15.1 iPadOS versions prior to 15.1 watchOS versions prior to 8.1 tvOS versions prior to 15.1 **Description** The issue is related to a buffer overflow problem due to inadequate input validation in the WPE WebKit web page rendering module. This can allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The problem is associated with the processing of maliciously crafted web content, which may lead to arbitrary code execution. **Recommendations** For macOS Monterey versions prior to 12.0.1, update to version 12.0.1 or later. For iOS versions prior to 15.1, update to version 15.1 or later. For iPadOS versions prior to 15.1, update to version 15.1 or later. For watchOS versions prior to 8.1, update to version 8.1 or later. For tvOS versions prior to 15.1, update to version 15.1 or later.