Zerokeeper

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 7.4.1 iOS versions prior to 14.5.1 iPadOS versions prior to 14.5.1 tvOS versions prior to 14.6 iOS versions prior to 12.5.3 macOS Big Sur versions prior to 11.3.1 **Description** A memory corruption issue was addressed with improved state management. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. **Recommendations** For watchOS versions prior to 7.4.1, update to watchOS 7.4.1 or later. For iOS versions prior to 14.5.1, update to iOS 14.5.1 or later. For iPadOS versions prior to 14.5.1, update to iPadOS 14.5.1 or later. For tvOS versions prior to 14.6, update to tvOS 14.6 or later. For iOS versions prior to 12.5.3, update to iOS 12.5.3 or later. For macOS Big Sur versions prior to 11.3.1, update to macOS Big Sur 11.3.1 or later.

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 14.1 iOS versions prior to 12.5.3 iOS versions prior to 14.5 iPadOS versions prior to 14.5 watchOS versions prior to 7.4 tvOS versions prior to 14.5 macOS Big Sur versions prior to 11.3 Description: The issue is related to a use after free problem in the WebKit module, which can be exploited by a remote attacker using a specially crafted web page, potentially leading to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Recommendations: For Safari version prior to 14.1, update to Safari 14.1 or later. For iOS version prior to 12.5.3, update to iOS 12.5.3 or later. For iOS version prior to 14.5, update to iOS 14.5 or later. For iPadOS version prior to 14.5, update to iPadOS 14.5 or later. For watchOS version prior to 7.4, update to watchOS 7.4 or later. For tvOS version prior to 14.5, update to tvOS 14.5 or later. For macOS Big Sur version prior to 11.3, update to macOS Big Sur 11.3 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 12.5.3 **Description** A buffer overflow issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. **Recommendations** For versions prior to 12.5.3, update to iOS 12.5.3 to resolve the issue. As a temporary workaround, consider avoiding the processing of maliciously crafted web content until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Bento4 version 1.5.1-627 **Description** A memory leak issue was found in the AP4 DescriptorFactory::CreateDescriptorFromStream function in Core/Ap4DescriptorFactory.cpp, which is called from the AP4 EsdsAtom class in Core/Ap4EsdsAtom.cpp. This issue is demonstrated by the mp42aac tool. **Recommendations** For Bento4 version 1.5.1-627, consider restricting access to the AP4 DescriptorFactory::CreateDescriptorFromStream function until a patch is available. As a temporary workaround, avoid using the AP4 EsdsAtom class in Core/Ap4EsdsAtom.cpp to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** libpng version 1.6.36 **Description** The issue is related to a memory leak in the `png create info struct` function in libpng. This leak occurs as demonstrated by pngcp. A third party has stated that they do not think it is libpng's job to free this buffer. The vulnerability may allow a remote attacker to cause a denial of service using multiple network protocols. **Recommendations** For libpng version 1.6.36, as a temporary workaround, consider disabling the `png create info struct` function until a patch is available. However, since the dispute regarding the responsibility for freeing the buffer exists, and no clear patch or update information is provided, the best course of action is to monitor for updates from the libpng developers regarding this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** LibTIFF version 4.0.10 **Description** The issue is related to a memory leak in the TIFFFdOpen function of the LibTIFF library, which can lead to uncontrolled memory allocation. This can be exploited by a remote attacker to cause a denial of service. **Recommendations** For LibTIFF version 4.0.10, consider applying a patch or updating to a newer version that fixes the memory leak issue in the TIFFFdOpen function. As a temporary workaround, restrict the use of the TIFFFdOpen function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Artifex MuPDF version 1.14.0 **Description** The issue is related to a SEGV in the `fz load page` function of the fitz/document.c file. This problem arises from page-number mishandling in several files, including cbz/mucbz.c, cbz/muimg.c, and svg/svg-doc.c. The issue can be demonstrated using mutool. **Recommendations** For Artifex MuPDF version 1.14.0, consider disabling the `fz load page` function as a temporary workaround until a patch is available. Restrict access to the affected files, including cbz/mucbz.c, cbz/muimg.c, and svg/svg-doc.c, to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Artifex MuPDF version 1.14.0 **Description** The issue is related to infinite recursion with stack consumption in the `svg run use symbol`, `svg run element`, and `svg run use` functions in the svg-run.c file. This can be demonstrated using mutool. **Recommendations** For Artifex MuPDF version 1.14.0, consider disabling the `svg run use symbol`, `svg run element`, and `svg run use` functions as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GNU Binutils version 2.31.1 **Description** The issue is related to a use-after-free error in the error function in elfcomm.c, which can be triggered by a crafted ELF file. This can potentially allow an attacker to cause a denial of service. **Recommendations** For GNU Binutils version 2.31.1, consider avoiding the use of crafted ELF files until a patch is available. As a temporary workaround, restrict access to the error function in elfcomm.c to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.