Tommy Muir

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16.2 iPadOS versions prior to 16.2 tvOS versions prior to 16.2 **Description** The issue was addressed with improved memory handling. Parsing a maliciously crafted TIFF file may lead to disclosure of user information. **Recommendations** For iOS versions prior to 16.2, update to iOS 16.2 or later. For iPadOS versions prior to 16.2, update to iPadOS 16.2 or later. For tvOS versions prior to 16.2, update to tvOS 16.2 or later.

**Name of the Vulnerable Software and Affected Versions** Apple macOS versions prior to 12.6.2 Apple macOS Ventura versions prior to 13.1 Apple macOS Big Sur versions prior to 11.7.2 Apple iOS versions prior to 15.7.2 Apple iOS versions prior to 16.2 Apple iPadOS versions prior to 15.7.2 Apple iPadOS versions prior to 16.2 Apple tvOS versions prior to 16.2 Apple watchOS versions prior to 9.2 **Description** A race condition was addressed with improved state handling, which may allow an app to execute arbitrary code with kernel privileges. **Recommendations** For macOS Monterey, update to version 12.6.2 or later. For macOS Ventura, update to version 13.1 or later. For macOS Big Sur, update to version 11.7.2 or later. For iOS 15, update to version 15.7.2 or later. For iOS 16, update to version 16.2 or later. For iPadOS 15, update to version 15.7.2 or later. For iPadOS 16, update to version 16.2 or later. For tvOS, update to version 16.2 or later. For watchOS, update to version 9.2 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13 **Description** A type confusion issue was addressed with improved checks, which may allow an app to execute arbitrary code with kernel privileges. **Recommendations** For versions prior to 13, update to macOS Ventura 13 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 13 **Description** A use after free issue was addressed with improved memory management. This issue may allow an app to cause unexpected system termination or potentially execute code with kernel privileges. **Recommendations** For versions prior to 13, update to macOS Ventura 13 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 15.6 iPadOS versions prior to 15.6 macOS Big Sur versions prior to 11.6.8 watchOS versions prior to 8.7 tvOS versions prior to 15.6 macOS Monterey versions prior to 12.5 macOS Catalina versions prior to Security Update 2022-005 **Description** The issue was addressed with improved memory handling. An app with root privileges may be able to execute arbitrary code with kernel privileges. **Recommendations** For iOS versions prior to 15.6, update to iOS 15.6 or later. For iPadOS versions prior to 15.6, update to iPadOS 15.6 or later. For macOS Big Sur versions prior to 11.6.8, update to macOS Big Sur 11.6.8 or later. For watchOS versions prior to 8.7, update to watchOS 8.7 or later. For tvOS versions prior to 15.6, update to tvOS 15.6 or later. For macOS Monterey versions prior to 12.5, update to macOS Monterey 12.5 or later. For macOS Catalina versions prior to Security Update 2022-005, apply Security Update 2022-005 or later.

**Name of the Vulnerable Software and Affected Versions** macOS Big Sur versions prior to 11.0.1 iOS versions prior to 14.2 iPadOS versions prior to 14.2 tvOS versions prior to 14.2 watchOS versions prior to 7.1 **Description** A path handling issue was addressed with improved validation, which may allow a local attacker to elevate their privileges. **Recommendations** For macOS Big Sur versions prior to 11.0.1, update to macOS Big Sur 11.0.1. For iOS versions prior to 14.2, update to iOS 14.2. For iPadOS versions prior to 14.2, update to iPadOS 14.2. For tvOS versions prior to 14.2, update to tvOS 14.2. For watchOS versions prior to 7.1, update to watchOS 7.1.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 11.0.1 iOS versions prior to 14.2 iPadOS versions prior to 14.2 tvOS versions prior to 14.2 watchOS versions prior to 7.1 **Description** A logic issue was addressed with improved state management. A malicious application may be able to determine kernel memory layout. **Recommendations** For macOS versions prior to 11.0.1, update to macOS Big Sur 11.0.1. For iOS versions prior to 14.2, update to iOS 14.2. For iPadOS versions prior to 14.2, update to iPadOS 14.2. For tvOS versions prior to 14.2, update to tvOS 14.2. For watchOS versions prior to 7.1, update to watchOS 7.1.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 14.0 iPadOS versions prior to 14.0 **Description** A memory initialization issue was addressed with improved memory handling, allowing a local user to potentially read kernel memory. **Recommendations** For iOS versions prior to 14.0, update to iOS 14.0 or later to resolve the issue. For iPadOS versions prior to 14.0, update to iPadOS 14.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** VLC media player versions prior to 3.0.11 **Description** A heap-based buffer overflow in the `hxxx AnnexB to xVC` function allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted H.264 Annex-B video file. The vulnerability can be exploited by playing a specially crafted video file, potentially allowing an attacker to execute arbitrary code on the affected system with the privileges of the user running VLC. **Recommendations** For versions prior to 3.0.11, update to version 3.0.11 or later to resolve the issue. As a temporary workaround, consider avoiding the playback of H.264 Annex-B video files until the update is applied.