Zhiyun Qian

**Name of the Vulnerable Software and Affected Versions** macOS Sequoia versions prior to 15.7.4 macOS Sonoma versions prior to 14.8.4 macOS Tahoe versions prior to 26.3 tvOS versions prior to 26.3 watchOS versions prior to 26.3 iOS versions prior to 18.7.5 iPadOS versions prior to 18.7.5 visionOS versions prior to 26.3 **Description** A logic issue exists that was addressed through improved checks. An attacker positioned on a privileged network may be able to intercept network traffic. **Recommendations** Update macOS Sequoia to version 15.7.4. Update macOS Sonoma to version 14.8.4. Update macOS Tahoe to version 26.3. Update tvOS to version 26.3. Update watchOS to version 26.3. Update iOS to version 18.7.5. Update iPadOS to version 18.7.5. Update visionOS to version 26.3.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Tahoe 26.3 **Description** A permissions issue existed where an application could potentially access protected user data. This was addressed through the implementation of additional restrictions. **Recommendations** Update to macOS Tahoe 26.3.

**Name of the Vulnerable Software and Affected Versions** NETGEAR Orbi 760 (affected versions not specified) **Description** This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR Orbi 760 routers. The specific flaw exists within the implementation of the SOAP API, resulting from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Chipolo ONE Bluetooth tracker (2020) version 4.13.0 Chipolo iOS app version 4.13.0 **Description** The issue concerns Incorrect Access Control, allowing access revocation evasion attacks. Once a malicious sharee obtains access credentials, Chipolo devices can be affected. **Recommendations** For Chipolo ONE Bluetooth tracker (2020) version 4.13.0, update the Chipolo iOS app to a version that addresses the access control issue. For Chipolo iOS app version 4.13.0, consider restricting access to sensitive features until a patch is available.

**Name of the Vulnerable Software and Affected Versions** NETGEAR R6400v2 version not specified NETGEAR R6700v3 version not specified NETGEAR R7000 version not specified NETGEAR R8500 version not specified NETGEAR RAX15 version not specified NETGEAR RAX20 version not specified NETGEAR RAX35v2 version not specified NETGEAR RAX38v2 version not specified NETGEAR RAX40v2 version not specified NETGEAR RAX42 version not specified NETGEAR RAX43 version not specified NETGEAR RAX45 version not specified NETGEAR RAX48 version not specified NETGEAR RAX50 version not specified NETGEAR RAX50S version not specified NETGEAR LAX20 version not specified **Description** This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR routers. The specific flaw exists within the `readycloud control.cgi` file, resulting from the lack of authentication prior to allowing access to functionality. An attacker can leverage this issue to execute code in the context of root. The exploitation of this issue may allow a remote attacker to bypass authentication via an alternative name. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.0.1 macOS Big Sur versions prior to 11.6.1 Security Update versions prior to 2021-007 Catalina **Description** A race condition was addressed with improved state handling, which may allow a malicious application to execute arbitrary code with kernel privileges. The issue is related to a Bluetooth component vulnerability in the macOS operating system, caused by concurrent execution using a shared resource with incorrect synchronization. **Recommendations** For macOS versions prior to 12.0.1, update to macOS Monterey 12.0.1 or later. For macOS Big Sur versions prior to 11.6.1, update to macOS Big Sur 11.6.1 or later. For Security Update versions prior to 2021-007 Catalina, apply Security Update 2021-007 Catalina or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.1 macOS Big Sur versions prior to 11.6.2 macOS Catalina versions prior to Security Update 2021-008 **Description** A race condition issue was addressed with improved locking, which could allow a remote attacker to cause unexpected application termination or heap corruption. **Recommendations** For macOS versions prior to 12.1, update to macOS Monterey 12.1 or later. For macOS Big Sur versions prior to 11.6.2, update to macOS Big Sur 11.6.2 or later. For macOS Catalina versions prior to Security Update 2021-008, apply Security Update 2021-008 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.0.1 macOS Big Sur versions prior to 11.6.2 macOS Catalina versions prior to Security Update 2021-008 **Description** A logic issue was addressed with improved validation. A malicious application may be able to disclose kernel memory. **Recommendations** For macOS versions prior to 12.0.1, update to macOS Monterey 12.0.1. For macOS Big Sur versions prior to 11.6.2, update to macOS Big Sur 11.6.2. For macOS Catalina versions prior to Security Update 2021-008, apply Security Update 2021-008.

**Name of the Vulnerable Software and Affected Versions** NVIDIA graphics driver (affected versions not specified) **Description** The issue allows access to application data processed on the GPU through a side channel exposed by the GPU performance counters. It requires local user access and is not a network or remote attack vector. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Huawei Mate 9 versions earlier than MHA-AL00BC00B233 **Description** The issue allows an attacker to trick a user into installing a malicious application, which can then be used to exploit the sensitive information leak. Successful exploitation may result in the leak of sensitive information. **Recommendations** For versions earlier than MHA-AL00BC00B233, update to a version MHA-AL00BC00B233 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Huawei smartphones with software versions EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; EVA-L09C55B190; EVA-L09C576B150; EVA-L09C635B221; EVA-L09C636B193; EVA-L09C675B130; EVA-L09C688B143; EVA-L09C703B160; EVA-L09C706B145; EVA-L09GBRC555B171; EVA-L09IRLC368B160; EVA-L19C10B190; EVA-L19C185B220; EVA-L19C20B160; EVA-L19C432B210; EVA-L19C636B190; EVA-L29C20B160; EVA-L29C636B191; EVA-TL00C01B198; VIE-L09C02B131; VIE-L09C109B181; VIE-L09C113B170; VIE-L09C150B170; VIE-L09C25B120; VIE-L09C40B181; VIE-L09C432B181; VIE-L09C55B170; VIE-L09C605B131; VIE-L09ITAC555B130; VIE-L29C10B170; VIE-L29C185B181; VIE-L29C605B131; VIE-L29C636B202 **Description** The issue is a denial of service (DoS) vulnerability that can be exploited by an attacker tricking a user into installing a malicious application. Successful exploitation can cause the camera application to become unusable. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.13.1 **Description** The issue involves the Kernel component and allows local users to obtain sensitive information by leveraging an error in packet counters. **Recommendations** For macOS versions prior to 10.13.1, update to version 10.13.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Huawei Mate8 phones with software NXT-AL10C00B561 and earlier versions Huawei Mate8 phones with software NXT-CL10C00B561 and earlier versions Huawei Mate8 phones with software NXT-DL10C00B561 and earlier versions Huawei Mate8 phones with software NXT-TL10C00B561 and earlier versions **Description** The issue in the ION memory management module allows attackers to cause a denial of service, which can result in the device restarting. **Recommendations** For Huawei Mate8 phones with software NXT-AL10C00B561 and earlier versions, update to a version later than NXT-AL10C00B561. For Huawei Mate8 phones with software NXT-CL10C00B561 and earlier versions, update to a version later than NXT-CL10C00B561. For Huawei Mate8 phones with software NXT-DL10C00B561 and earlier versions, update to a version later than NXT-DL10C00B561. For Huawei Mate8 phones with software NXT-TL10C00B561 and earlier versions, update to a version later than NXT-TL10C00B561.

**Name of the Vulnerable Software and Affected Versions** Huawei P9 phones with software EVA-AL10C00B192 and earlier versions Huawei P9 phones with software EVA-DL10C00B192 and earlier versions Huawei P9 phones with software EVA-TL10C00B192 and earlier versions Huawei P9 phones with software EVA-CL10C00B192 and earlier versions **Description** The issue in the ION memory management module allows attackers to obtain sensitive information from uninitialized memory. **Recommendations** For Huawei P9 phones with software EVA-AL10C00B192 and earlier versions, update to a version later than EVA-AL10C00B192. For Huawei P9 phones with software EVA-DL10C00B192 and earlier versions, update to a version later than EVA-DL10C00B192. For Huawei P9 phones with software EVA-TL10C00B192 and earlier versions, update to a version later than EVA-TL10C00B192. For Huawei P9 phones with software EVA-CL10C00B192 and earlier versions, update to a version later than EVA-CL10C00B192.

**Name of the Vulnerable Software and Affected Versions** Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions Huawei Mate 8 phones with software NXT-DL10C00B197 and earlier versions Huawei Mate 8 phones with software NXT-TL10C00B197 and earlier versions Huawei Mate 8 phones with software NXT-CL10C00B197 and earlier versions **Description** The issue affects the ION memory management module, allowing attackers to cause a denial of service, which results in the device restarting. **Recommendations** For Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions, update to a version later than NXT-AL10C00B197. For Huawei Mate 8 phones with software NXT-DL10C00B197 and earlier versions, update to a version later than NXT-DL10C00B197. For Huawei Mate 8 phones with software NXT-TL10C00B197 and earlier versions, update to a version later than NXT-TL10C00B197. For Huawei Mate 8 phones with software NXT-CL10C00B197 and earlier versions, update to a version later than NXT-CL10C00B197.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-10-05 **Description** The issue is related to multiple use-after-free vulnerabilities in the Qualcomm sound driver. These vulnerabilities allow attackers to gain privileges via a crafted application. The estimated number of potentially affected devices is not specified. **Recommendations** For Android versions prior to 2016-10-05, update to a version released after 2016-10-05 to resolve the issue. As a temporary workaround, consider restricting access to the sound driver to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 4.0.3 **Description** The issue allows local users to obtain sensitive information from kernel memory. This is due to the failure to initialize certain data structures in the arch/arm64/mm/dma-mapping.c file, which can be exploited by triggering a dma mmap call. **Recommendations** For Linux kernel versions prior to 4.0.3, update to version 4.0.3 or later to resolve the issue.