Yisumi

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 16.7.9 iPadOS versions prior to 16.7.9 macOS Ventura versions prior to 13.6.8 macOS Monterey versions prior to 12.7.6 iOS versions prior to 17.6 iPadOS versions prior to 17.6 watchOS versions prior to 10.6 tvOS versions prior to 17.6 visionOS versions prior to 1.3 macOS Sonoma versions prior to 14.6 **Description** An out-of-bounds read issue was addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination. **Recommendations** For iOS versions prior to 16.7.9, update to iOS 16.7.9 or later. For iPadOS versions prior to 16.7.9, update to iPadOS 16.7.9 or later. For macOS Ventura versions prior to 13.6.8, update to macOS Ventura 13.6.8 or later. For macOS Monterey versions prior to 12.7.6, update to macOS Monterey 12.7.6 or later. For iOS versions prior to 17.6, update to iOS 17.6 or later. For iPadOS versions prior to 17.6, update to iPadOS 17.6 or later. For watchOS versions prior to 10.6, update to watchOS 10.6 or later. For tvOS versions prior to 17.6, update to tvOS 17.6 or later. For visionOS versions prior to 1.3, update to visionOS 1.3 or later. For macOS Sonoma versions prior to 14.6, update to macOS Sonoma 14.6 or later.

**Name of the Vulnerable Software and Affected Versions** LibTIFF (affected versions not specified) **Description** The issue is related to a segment fault (SEGV) flaw in the LibTIFF library, specifically in the `TIFFReadRGBATileExt()` API endpoint. This flaw can be triggered by passing a crafted TIFF file, allowing a remote attacker to cause a heap-buffer overflow, which can lead to a denial of service. The vulnerability is associated with a buffer overflow in memory, potentially enabling a remote attacker to disrupt service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GNU indent version 2.2.13 **Description** The issue is a heap-based buffer overflow in the `search brace` function in `indent.c` via a crafted file. Additionally, there is a heap overread in the `lexi()` function. **Recommendations** For GNU indent version 2.2.13, as a temporary workaround, consider disabling the `search brace` function and restricting the use of the `lexi()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.