Pan Zhenpeng

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** Improper input validation in the operating system kernel allows a malicious app to pass crafted data into a privileged system or kernel-facing interface. This can lead to kernel memory corruption, where the system's core memory is modified in an unintended way, or unexpected system termination. An attacker can exploit this by running a specially crafted app locally on a device to trigger the vulnerable code path and feed malformed inputs into the kernel, potentially resulting in a denial of service through forced reboots or privilege escalation. **Recommendations** Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.7.9 iPadOS versions prior to 18.7.9 iOS versions prior to 26.5 iPadOS versions prior to 26.5 macOS Sequoia versions prior to 15.7.7 macOS Sonoma versions prior to 14.8.7 macOS Tahoe versions prior to 26.5 tvOS versions prior to 26.5 visionOS versions prior to 26.5 watchOS versions prior to 26.5 **Description** A buffer overflow, which occurs when more data is written to a memory block than it can hold, was identified. A local user could exploit this to cause unexpected system termination or read kernel memory. **Recommendations** Update iOS to version 18.7.9 or 26.5 Update iPadOS to version 18.7.9 or 26.5 Update macOS Sequoia to version 15.7.7 Update macOS Sonoma to version 14.8.7 Update macOS Tahoe to version 26.5 Update tvOS to version 26.5 Update visionOS to version 26.5 Update watchOS to version 26.5

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.7.9 iPadOS versions prior to 18.7.9 iOS versions prior to 26.5 iPadOS versions prior to 26.5 macOS Sequoia versions prior to 15.7.7 macOS Sonoma versions prior to 14.8.7 macOS Tahoe versions prior to 26.5 tvOS versions prior to 26.5 visionOS versions prior to 26.5 watchOS versions prior to 26.5 **Description** An out-of-bounds write issue exists due to insufficient input validation. This flaw allows an application to write to kernel memory or cause unexpected system termination. **Recommendations** Update iOS to version 18.7.9 Update iPadOS to version 18.7.9 Update iOS to version 26.5 Update iPadOS to version 26.5 Update macOS Sequoia to version 15.7.7 Update macOS Sonoma to version 14.8.7 Update macOS Tahoe to version 26.5 Update tvOS to version 26.5 Update visionOS to version 26.5 Update watchOS to version 26.5

**Name of the Vulnerable Software and Affected Versions** macOS Tahoe versions prior to 26.5 **Description** A permissions issue exists where an app may be able to access protected user data. **Recommendations** Update to macOS Tahoe 26.5.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos 1380 (affected versions not specified) **Description** A Use-After-Free issue in the mobile processor leads to privilege escalation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 1280, 1380, 1480, 2200, 2400 **Description** An issue was discovered in the mobile processor, where a Double Free leads to privilege escalation. **Recommendations** For Samsung Mobile Processor Exynos versions 1280, 1380, 1480, 2200, 2400, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 1480, 2200, and 2400 **Description** An issue was discovered in the mobile processor, where a Use-After-Free leads to privilege escalation. **Recommendations** For Samsung Mobile Processor Exynos versions 1480, 2200, and 2400, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 980 through 9825, 990, 1080, 2100, 1280, 2200, and 1380 **Description** An issue was discovered in Samsung Mobile Processor Exynos, where a Double Free in the mobile processor leads to privilege escalation. **Recommendations** For Samsung Mobile Processor Exynos versions 980 through 9825, 990, 1080, 2100, 1280, 2200, and 1380, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos 1380 (affected versions not specified) **Description** An issue was discovered in the Samsung Mobile Processor Exynos 1380, where the lack of a length check leads to out-of-bounds writes. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 1280, 1380, 1480, 2200, 2400 **Description** An issue was discovered in Samsung Mobile Processor Exynos, where the absence of a NULL check leads to a Denial of Service. **Recommendations** For Samsung Mobile Processor Exynos versions 1280, 1380, 1480, 2200, 2400, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 1280, 1380, 1480, 2200, 2400 **Description** A Double Free issue in the mobile processor can lead to privilege escalation. This issue affects Samsung Mobile Processor Exynos models 1280, 1380, 1480, 2200, and 2400. **Recommendations** For Samsung Mobile Processor Exynos versions 1280, 1380, 1480, 2200, 2400, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 1480 and 2400 **Description** An issue was discovered in the Samsung Mobile Processor Exynos, where the lack of a length check leads to out-of-bounds writes. **Recommendations** For Samsung Mobile Processor Exynos version 1480, consider implementing a length check to prevent out-of-bounds writes until a patch is available. For Samsung Mobile Processor Exynos version 2400, consider implementing a length check to prevent out-of-bounds writes until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 1480 through 2400 **Description** An issue was discovered in the Samsung Mobile Processor Exynos, where the lack of a length check leads to out-of-bounds writes. **Recommendations** For Samsung Mobile Processor Exynos versions 1480 through 2400, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 980, 990, 1080, 2100, 1280, 2200, 1380 **Description** A Use-After-Free issue in the mobile processor leads to privilege escalation. **Recommendations** For Samsung Mobile Processor Exynos versions 980, 990, 1080, 2100, 1280, 2200, 1380, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 1480, 2200, and 2400 **Description** A Use-After-Free issue in the mobile processor can lead to privilege escalation. **Recommendations** For Samsung Mobile Processor Exynos versions 1480, 2200, and 2400, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 1480 and 2400 **Description** The issue is related to the lack of a length check, which leads to out-of-bounds writes. This problem was discovered in the Samsung Mobile Processor Exynos. **Recommendations** For Samsung Mobile Processor Exynos versions 1480 and 2400, consider implementing a length check to prevent out-of-bounds writes until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 1480, 2200, and 2400 **Description** A Use-After-Free issue in the mobile processor leads to privilege escalation. **Recommendations** For Samsung Mobile Processor Exynos versions 1480, 2200, and 2400, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** visionOS versions prior to 1.2 watchOS versions prior to 10.5 tvOS versions prior to 17.5 iOS versions prior to 17.5 iPadOS versions prior to 17.5 **Description** The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges. **Recommendations** For visionOS versions prior to 1.2, update to visionOS 1.2 to resolve the issue. For watchOS versions prior to 10.5, update to watchOS 10.5 to resolve the issue. For tvOS versions prior to 17.5, update to tvOS 17.5 to resolve the issue. For iOS versions prior to 17.5, update to iOS 17.5 to resolve the issue. For iPadOS versions prior to 17.5, update to iPadOS 17.5 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Softing edgeAggregator and Softing edgeConnector modules (affected versions not specified) Softing edgeConnector Modbus (affected versions not specified) Softing edgeConnector 840D (affected versions not specified) Softing edgeConnector Fanuc CNC (affected versions not specified) Softing edgeConnector Siemens (affected versions not specified) **Description** The issue is related to the transmission of credentials in cleartext, which may allow a remote attacker to capture packets and craft their own requests, potentially leading to unauthorized access to protected information. This could enable an attacker to bypass authentication. **Recommendations** For Softing edgeAggregator, consider disabling the transmission of credentials in cleartext until a patch is available. For Softing edgeConnector modules, restrict access to sensitive information to minimize the risk of exploitation. For Softing edgeConnector Modbus, Softing edgeConnector 840D, Softing edgeConnector Fanuc CNC, and Softing edgeConnector Siemens, avoid using cleartext transmission of credentials in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 17.3 iPadOS versions prior to 17.3 tvOS versions prior to 17.3 macOS Ventura versions prior to 13.6.4 iOS versions prior to 16.7.5 iPadOS versions prior to 16.7.5 macOS Monterey versions prior to 12.7.3 macOS Sonoma versions prior to 14.3 **Description** The issue allows an app to potentially corrupt coprocessor memory. This was addressed with improved checks. **Recommendations** For iOS versions prior to 17.3, update to iOS 17.3 or later. For iPadOS versions prior to 17.3, update to iPadOS 17.3 or later. For tvOS versions prior to 17.3, update to tvOS 17.3 or later. For macOS Ventura versions prior to 13.6.4, update to macOS Ventura 13.6.4 or later. For iOS versions prior to 16.7.5, update to iOS 16.7.5 or later. For iPadOS versions prior to 16.7.5, update to iPadOS 16.7.5 or later. For macOS Monterey versions prior to 12.7.3, update to macOS Monterey 12.7.3 or later. For macOS Sonoma versions prior to 14.3, update to macOS Sonoma 14.3 or later.