Kimyok

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.12.4 **Description** The issue involves the CoreMedia component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted .mov file. This is caused by a buffer overflow in memory. **Recommendations** For macOS versions prior to 10.12.4, update to version 10.12.4 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted .mov files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.12.4 **Description** The issue involves the `SecurityFoundation` component and is related to a double free vulnerability. This vulnerability allows remote attackers to execute arbitrary code via a crafted certificate. **Recommendations** For macOS versions prior to 10.12.4, update to version 10.12.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `SecurityFoundation` component until a patch is available. Avoid using specially crafted certificates in the affected component to minimize the risk of exploitation.