Apple CoreText libType1Scaler.dylib suffers from a heap buffer overflow vulnerability in the Counter Control Hints.
>> TAG: #osx
Apple CoreText libType1Scaler.dylib suffers from a memory disclosure vulnerability via an uninitialized transient array.
Apple CoreText libFontParser.dylib suffers from a stack corruption vulnerability in the handling of /BlendDesignPositions Type 1 objects.
Apple CoreText libType1Scaler.dylib suffers from a heap out-of-bounds-write due to an integer overflow vulnerability in STOREWV othersubr.
Apple Security Advisory 2021-02-01-1 – macOS Big Sur 11.2, Security Update 2021-001 Catalina, and Security Update 2021-001 Mojave address buffer overflow, bypass, code execution, denial of service, integer overflow, out…
Apple Security Advisory 2021-02-01-3 – tvOS 14.4 addresses bypass, code execution, denial of service, out of bounds read, out of bounds write, and use-after-free vulnerabilities.
Apple Security Advisory 2021-02-01-2 – iOS 14.4 and iPadOS 14.4 addresses buffer overflow, bypass, code execution, denial of service, out of bounds read, out of bounds write, and use-after-free vulnerabilities.
Apple Security Advisory 2021-02-01-4 – watchOS 7.3 addresses bypass, code execution, denial of service, out of bounds read, out of bounds write, and use-after-free vulnerabilities.
Apple Security Advisory 2021-01-26-1 – iOS 14.4 and iPadOS 14.4 address race condition and arbitrary code execution vulnerabilities.
Apple Security Advisory 2021-01-26-3 – watchOS 7.3 addresses a race condition vulnerability.