Hossein Lotfi

**Name of the Vulnerable Software and Affected Versions** Apple Safari versions prior to 26.2 iOS versions prior to 18.7.3 iPadOS versions prior to 18.7.3 macOS Tahoe versions prior to 26.2 visionOS versions prior to 26.2 webkit2gtk3 (affected versions not specified) wpewebkit (affected versions not specified) webkit2gtk (affected versions not specified) **Description** The software contains a type confusion issue stemming from improper state handling when processing web content. This can lead to an unexpected crash of the application. The issue is related to the handling of the `byteLength` property within the JavaScriptCore FTL DataView component. **Recommendations** Update Apple Safari to version 26.2 or later. Update iOS to version 18.7.3 or later. Update iPadOS to version 18.7.3 or later. Update macOS Tahoe to version 26.2 or later. Update visionOS to version 26.2 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability. for webkit2gtk3, wpewebkit and webkit2gtk.

**Name of the Vulnerable Software and Affected Versions** Apple Safari versions prior to 26.2 iOS versions prior to 18.7.3 iPadOS versions prior to 18.7.3 macOS Tahoe versions prior to 26.2 visionOS versions prior to 26.2 WebKitGTK (affected versions not specified) webkit2gtk in Debian Linux (affected versions not specified) webkit2gtk3 in SberLinux (affected versions not specified) wpewebkit in Debian Linux (affected versions not specified) **Description** This issue is a buffer overflow in Apple Safari’s JavaScriptCore and WebKitGTK, stemming from improper memory handling when processing maliciously crafted web content. This can lead to an unexpected process crash. The issue was addressed by improving memory handling. There is no mention of the number of potentially affected devices or any real-world incidents where this issue was exploited. **Recommendations** Update Apple Safari to version 26.2 or later. Update iOS to version 18.7.3 or later. Update iPadOS to version 18.7.3 or later. Update macOS Tahoe to version 26.2 or later. Update visionOS to version 26.2 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability for WebKitGTK, webkit2gtk in Debian Linux, webkit2gtk3 in SberLinux, and wpewebkit in Debian Linux.

**Name of the Vulnerable Software and Affected Versions** Apple Safari versions prior to 26.1 watchOS versions prior to 26.1 iOS versions prior to 26.1 iPadOS versions prior to 26.1 visionOS versions prior to 26.1 **Description** A use-after-free issue exists due to improved memory management. Processing maliciously crafted web content may lead to an unexpected Safari crash. The issue involves Array allocation sinking in DFG. **Recommendations** Update Apple Safari to version 26.1. Update watchOS to version 26.1. Update iOS to version 26.1. Update iPadOS to version 26.1. Update visionOS to version 26.1.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14.8.2 visionOS versions prior to 26.1 watchOS versions prior to 26.1 iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 tvOS versions prior to 26.1 macOS Sequoia versions prior to 15.7.2 **Description** An out-of-bounds read issue exists due to insufficient input validation when processing maliciously crafted media files. This may result in unexpected application termination or corruption of process memory. **Recommendations** Update macOS to version 14.8.2 or later. Update visionOS to version 26.1 or later. Update watchOS to version 26.1 or later. Update iOS to version 18.7.2 or later. Update iPadOS to version 18.7.2 or later. Update tvOS to version 26.1 or later. Update macOS Sequoia to version 15.7.2 or later.

**Name of the Vulnerable Software and Affected Versions** Apple Safari versions prior to 26.1 visionOS versions prior to 26.1 watchOS versions prior to 26.1 iOS versions prior to 26.1 iPadOS versions prior to 26.1 tvOS versions prior to 26.1 **Description** A use-after-free issue exists due to improper memory management when processing maliciously crafted web content. This can lead to an unexpected process crash. The issue relates to the WasmFunctionParser and its handling of function signatures. **Recommendations** Update Apple Safari to version 26.1. Update visionOS to version 26.1. Update watchOS to version 26.1. Update iOS to version 26.1. Update iPadOS to version 26.1. Update tvOS to version 26.1.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.7 iPadOS versions prior to 18.7 macOS versions prior to Tahoe 26 tvOS versions prior to 26 watchOS versions prior to 26 visionOS versions prior to 26 **Description** An out-of-bounds access issue existed due to insufficient bounds checking. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory. **Recommendations** Update to iOS version 18.7 or later. Update to iPadOS version 18.7 or later. Update to macOS version Tahoe 26 or later. Update to tvOS version 26 or later. Update to watchOS version 26 or later. Update to visionOS version 26 or later.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 11.6 iOS versions prior to 18.6 iPadOS versions prior to 18.6 tvOS versions prior to 18.6 macOS Sequoia versions prior to 15.6 macOS Sonoma versions prior to 14.7.7 visionOS versions prior to 2.6 macOS Ventura versions prior to 13.7.7 **Description** The issue involves improved memory handling. Parsing a file may lead to unexpected application termination. **Recommendations** Update watchOS to version 11.6 or later. Update iOS to version 18.6 or later. Update iPadOS to version 18.6 or later. Update tvOS to version 18.6 or later. Update macOS Sequoia to version 15.6 or later. Update macOS Sonoma to version 14.7.7 or later. Update visionOS to version 2.6 or later. Update macOS Ventura to version 13.7.7 or later.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 11.5 macOS Sonoma versions prior to 14.7.6 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 macOS Ventura versions prior to 13.7.6 **Description** The issue was addressed with improved input sanitization. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory. **Recommendations** For watchOS versions prior to 11.5, update to watchOS 11.5 to resolve the issue. For macOS Sonoma versions prior to 14.7.6, update to macOS Sonoma 14.7.6 to resolve the issue. For tvOS versions prior to 18.5, update to tvOS 18.5 to resolve the issue. For iPadOS versions prior to 17.7.7, update to iPadOS 17.7.7 to resolve the issue. For iOS versions prior to 18.5, update to iOS 18.5 to resolve the issue. For iPadOS versions prior to 18.5, update to iPadOS 18.5 to resolve the issue. For macOS Sequoia versions prior to 15.5, update to macOS Sequoia 15.5 to resolve the issue. For visionOS versions prior to 2.5, update to visionOS 2.5 to resolve the issue. For macOS Ventura versions prior to 13.7.6, update to macOS Ventura 13.7.6 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 11.5 macOS Sonoma versions prior to 14.7.6 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 macOS Ventura versions prior to 13.7.6 **Description** An out-of-bounds read issue was addressed with improved bounds checking. This issue may lead to disclosure of user information when parsing a file. **Recommendations** For watchOS versions prior to 11.5, update to watchOS 11.5. For macOS Sonoma versions prior to 14.7.6, update to macOS Sonoma 14.7.6. For tvOS versions prior to 18.5, update to tvOS 18.5. For iPadOS versions prior to 17.7.7, update to iPadOS 17.7.7. For iOS versions prior to 18.5, update to iOS 18.5. For iPadOS versions prior to 18.5, update to iPadOS 18.5. For macOS Sequoia versions prior to 15.5, update to macOS Sequoia 15.5. For visionOS versions prior to 2.5, update to visionOS 2.5. For macOS Ventura versions prior to 13.7.6, update to macOS Ventura 13.7.6.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 11.5 macOS Sonoma versions prior to 14.7.6 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 macOS Ventura versions prior to 13.7.6 **Description** The issue is related to parsing a file, which may lead to an unexpected app termination. It was addressed with improved checks. **Recommendations** For watchOS versions prior to 11.5, update to watchOS 11.5. For macOS Sonoma versions prior to 14.7.6, update to macOS Sonoma 14.7.6. For tvOS versions prior to 18.5, update to tvOS 18.5. For iPadOS versions prior to 17.7.7, update to iPadOS 17.7.7. For iOS versions prior to 18.5, update to iOS 18.5. For iPadOS versions prior to 18.5, update to iPadOS 18.5. For macOS Sequoia versions prior to 15.5, update to macOS Sequoia 15.5. For visionOS versions prior to 2.5, update to visionOS 2.5. For macOS Ventura versions prior to 13.7.6, update to macOS Ventura 13.7.6.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 11.5 macOS Sonoma versions prior to 14.7.6 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 macOS Ventura versions prior to 13.7.6 **Description** A use-after-free issue was addressed with improved memory management. Parsing a file may lead to an unexpected app termination. **Recommendations** For watchOS versions prior to 11.5, update to watchOS 11.5. For macOS Sonoma versions prior to 14.7.6, update to macOS Sonoma 14.7.6. For tvOS versions prior to 18.5, update to tvOS 18.5. For iPadOS versions prior to 17.7.7, update to iPadOS 17.7.7. For iOS versions prior to 18.5, update to iOS 18.5. For iPadOS versions prior to 18.5, update to iPadOS 18.5. For macOS Sequoia versions prior to 15.5, update to macOS Sequoia 15.5. For visionOS versions prior to 2.5, update to visionOS 2.5. For macOS Ventura versions prior to 13.7.6, update to macOS Ventura 13.7.6.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 11.5 macOS Sonoma versions prior to 14.7.6 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 macOS Ventura versions prior to 13.7.6 **Description** The issue was addressed with improved input sanitization. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory. **Recommendations** For watchOS versions prior to 11.5, update to watchOS 11.5. For macOS Sonoma versions prior to 14.7.6, update to macOS Sonoma 14.7.6. For tvOS versions prior to 18.5, update to tvOS 18.5. For iPadOS versions prior to 17.7.7, update to iPadOS 17.7.7. For iOS versions prior to 18.5, update to iOS 18.5. For iPadOS versions prior to 18.5, update to iPadOS 18.5. For macOS Sequoia versions prior to 15.5, update to macOS Sequoia 15.5. For visionOS versions prior to 2.5, update to visionOS 2.5. For macOS Ventura versions prior to 13.7.6, update to macOS Ventura 13.7.6.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.7.3 macOS versions prior to 14.7.3 macOS versions prior to 15.3 **Description** The issue is related to parsing a maliciously crafted file, which may lead to an unexpected app termination. It is also associated with an unlimited resource allocation vulnerability in the Sips command-line tool for editing images in macOS, allowing a remote attacker to cause a denial of service. **Recommendations** For versions prior to 13.7.3, update to macOS Ventura 13.7.3. For versions prior to 14.7.3, update to macOS Sonoma 14.7.3. For versions prior to 15.3, update to macOS Sequoia 15.3.

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.3 watchOS versions prior to 11.2 visionOS versions prior to 2.2 tvOS versions prior to 18.2 macOS Sequoia versions prior to 15.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 macOS Ventura versions prior to 13.7.2 macOS Sonoma versions prior to 14.7.2 Description: The issue was addressed with improved checks. Processing a maliciously crafted font may result in the disclosure of process memory. Recommendations: For iPadOS versions prior to 17.7.3, update to iPadOS 17.7.3 or later. For watchOS versions prior to 11.2, update to watchOS 11.2 or later. For visionOS versions prior to 2.2, update to visionOS 2.2 or later. For tvOS versions prior to 18.2, update to tvOS 18.2 or later. For macOS Sequoia versions prior to 15.2, update to macOS Sequoia 15.2 or later. For iOS versions prior to 18.2, update to iOS 18.2 or later. For iPadOS versions prior to 18.2, update to iPadOS 18.2 or later. For macOS Ventura versions prior to 13.7.2, update to macOS Ventura 13.7.2 or later. For macOS Sonoma versions prior to 14.7.2, update to macOS Sonoma 14.7.2 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.7.1 macOS versions prior to 14.7.1 **Description** An out-of-bounds read issue was addressed with improved input validation. Parsing a file may lead to disclosure of user information. **Recommendations** For macOS versions prior to 13.7.1, update to macOS Ventura 13.7.1 to resolve the issue. For macOS versions prior to 14.7.1, update to macOS Sonoma 14.7.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13.7.1 macOS versions prior to 14.7.1 **Description** The issue is related to an out-of-bounds read that can be addressed with improved input validation. Parsing a file may lead to disclosure of user information. **Recommendations** For macOS versions prior to 13.7.1, update to macOS Ventura 13.7.1. For macOS versions prior to 14.7.1, update to macOS Sonoma 14.7.1.

**Name of the Vulnerable Software and Affected Versions** macOS Ventura versions prior to 13.7.1 macOS Sonoma versions prior to 14.7.1 **Description** An out-of-bounds access issue was addressed with improved bounds checking. Processing a maliciously crafted file may lead to unexpected app termination. **Recommendations** For macOS Ventura versions prior to 13.7.1, update to macOS Ventura 13.7.1 to resolve the issue. For macOS Sonoma versions prior to 14.7.1, update to macOS Sonoma 14.7.1 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple tvOS versions prior to 18.1 Apple iOS versions prior to 18.1 Apple iOS versions prior to 17.7.1 Apple iPadOS versions prior to 18.1 Apple iPadOS versions prior to 17.7.1 Apple macOS Ventura versions prior to 13.7.1 Apple macOS Sonoma versions prior to 14.7.1 Apple watchOS versions prior to 11.1 Apple visionOS versions prior to 2.1 **Description** An out-of-bounds read issue was addressed with improved input validation. Parsing a file may lead to disclosure of user information. **Recommendations** Update to tvOS 18.1 or later. Update to iOS 18.1 or later. Update to iOS 17.7.1 or later. Update to iPadOS 18.1 or later. Update to iPadOS 17.7.1 or later. Update to macOS Ventura 13.7.1 or later. Update to macOS Sonoma 14.7.1 or later. Update to watchOS 11.1 or later. Update to visionOS 2.1 or later.

**Name of the Vulnerable Software and Affected Versions** Apple tvOS versions prior to 18.1 Apple iOS versions prior to 18.1 Apple iPadOS versions prior to 18.1 Apple iOS versions prior to 17.7.1 Apple iPadOS versions prior to 17.7.1 Apple macOS Ventura versions prior to 13.7.1 Apple macOS Sonoma versions prior to 14.7.1 Apple watchOS versions prior to 11.1 Apple visionOS versions prior to 2.1 **Description** The issue is related to the processing of maliciously crafted fonts, which may result in the disclosure of process memory. This is due to an out-of-bounds read information disclosure in the CoreText Font Ligature Caret List Parsing. **Recommendations** For Apple tvOS versions prior to 18.1, update to tvOS 18.1 or later. For Apple iOS versions prior to 18.1, update to iOS 18.1 or later. For Apple iPadOS versions prior to 18.1, update to iPadOS 18.1 or later. For Apple iOS versions prior to 17.7.1, update to iOS 17.7.1 or later. For Apple iPadOS versions prior to 17.7.1, update to iPadOS 17.7.1 or later. For Apple macOS Ventura versions prior to 13.7.1, update to macOS Ventura 13.7.1 or later. For Apple macOS Sonoma versions prior to 14.7.1, update to macOS Sonoma 14.7.1 or later. For Apple watchOS versions prior to 11.1, update to watchOS 11.1 or later. For Apple visionOS versions prior to 2.1, update to visionOS 2.1 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 18.1 Apple iOS versions prior to 17.7.1 Apple iPadOS versions prior to 18.1 Apple iPadOS versions prior to 17.7.1 Apple tvOS versions prior to 18.1 Apple macOS Ventura versions prior to 13.7.1 Apple macOS Sonoma versions prior to 14.7.1 Apple watchOS versions prior to 11.1 Apple visionOS versions prior to 2.1 **Description** The issue was addressed with improved checks. Processing a maliciously crafted font may result in the disclosure of process memory. **Recommendations** For Apple iOS versions prior to 18.1, update to iOS 18.1 or later. For Apple iOS versions prior to 17.7.1, update to iOS 17.7.1 or later. For Apple iPadOS versions prior to 18.1, update to iPadOS 18.1 or later. For Apple iPadOS versions prior to 17.7.1, update to iPadOS 17.7.1 or later. For Apple tvOS versions prior to 18.1, update to tvOS 18.1 or later. For Apple macOS Ventura versions prior to 13.7.1, update to macOS Ventura 13.7.1 or later. For Apple macOS Sonoma versions prior to 14.7.1, update to macOS Sonoma 14.7.1 or later. For Apple watchOS versions prior to 11.1, update to watchOS 11.1 or later. For Apple visionOS versions prior to 2.1, update to visionOS 2.1 or later.