:: Deepquest ::

The iOS kernel suffers from a use-after-free vulnerability in IOHIDEventService.

A buffer overflow vulnerability exists in SAP HANA interface. If an attacker has a network access to the SQL interface or the SAP HANA Extended Application Services interface of an SAP HANA system, the vulnerability enables the attacker to inject code into the working memory that is subsequently executed by the application. It can also […]

Apple Security Advisory 2016-01-25-1 – tvOS 9.1.1 is now available and addresses code execution vulnerabilities.

iOS and OS X suffer from a kernel code execution vulnerability via double-delete in IOHIDEventQueue:start due to incorrect error handling.

iOS and OS X suffers from a kernel code execution vulnerability due to an integer overflow in NECP system control socket packet parsing.

iOS / OS X suffer from a kernel double free due to lack of locking in Iokit registry iterator manipulation.

com.apple.audio.coreaudiod is reachable from various sandboxes including the Safari renderer. coreaudiod is sandboxed and runs as its own user, nevertheless it has access to various other interesting attack surfaces which safari doesn’t, allowing this bug to potentially form part of a full sandbox escape chain.

iOS / OS X kernels suffer from a use-after-free / double free vulnerability due to lack of locking in IOHDIXControllUserClient:clientClose.

OS X – gst_configure Kernel Buffer Overflow

iOS and OS X – NECP System Control Socket Packet Parsing Kernel Code Execution Integer Overflow