CVE Vulnerability Catalog

A permissions issue in macOS was addressed with additional restrictions. An app with root privileges may be able to access private information.

A logic issue in macOS was addressed with improved validation. The issue affects macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. A maliciously crafted disk image may bypass Gatekeeper checks.

An out-of-bounds write issue was addressed with improved bounds checking. The issue affects iOS 26.7.2 and iPadOS 26.7.2, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8.2, and macOS Tahoe 26.7.2. Processing a maliciously crafted image may result in memory corruption.

An authorization issue in macOS was addressed with improved state management. The issue affects macOS Golden Gate 27 and macOS Tahoe 26.7.2. An app may be able to access sensitive user data.

In Seroval from 1.6.0 until 1.6.11, JavaScript-output APIs derive a typed array's constructor name from a property that can be replaced by an own constructor property. When application code copies untrusted properties onto a typed array and serializes it, the attacker-controlled name is written as executable JavaScript.

In Seroval prior to 1.0.0 and from 1.5.5 until 1.6.10, JavaScript-output APIs serialize a RegExp source containing a less-than character without the escaping needed for an HTML script element. When an application builds a RegExp from untrusted input and embeds the result in a script element, the crafted source can terminate the element and execute script.

In Autobahn Python from 26.7.1 until 26.10.1, PerMessageBrotli.decompress_message_data in compress_brotli.py calls the Brotli decompressor without an output limit and checks maxMessagePayloadSize only after a complete frame is inflated. An unauthenticated WebSocket client can send a small, highly compressed frame that allocates hundreds of MiB before rejection.

Tornado, a Python web framework and asynchronous networking library, prior to 6.6 accepts obsolete HTTP line folding and repeatedly concatenates short continuation lines, causing quadratic CPU consumption on the IOLoop thread. An unauthenticated client can submit a header block with many obsolete line-folding continuations before application code runs, blocking other connections served by the process. The cost grows with max_header_size, and only availability is affected.

Mem0, persistent memory infrastructure for AI agents, prior to Python SDK 2.0.18 and TypeScript SDK 3.1.6 joins caller-controlled user_id, agent_id and run_id values using unescaped & and = delimiters, allowing another scope component to be embedded in an identifier so distinct tenant tuples produce the same session_scope key. Memory.add(), AsyncMemory.add() and REST POST /memories use that key to read and save raw messages, enabling cross-tenant conversation disclosure and eviction or interleaving of another tenant's history.

In ExLlamaV2 up to 0.3.2, the function QMatrix::make_sequential in exllamav2/exllamav2_ext/cuda/q_matrix.cu (GPTQ Index Handler component) can cause an out-of-bounds write when the g_idx argument is manipulated. The attack requires local access. The project was informed but has not responded.

A logic issue in Safari and Apple systems was addressed with improved checks. The issue affects Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, and macOS Golden Gate 27.2. A website may be able to use a media format that should be restricted in Lockdown Mode.

An out-of-bounds write issue was addressed with improved bounds checking. The issue affects iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, and watchOS 27.2. Processing a maliciously crafted font may lead to unexpected app termination or corrupt process memory.

A permissions issue in macOS was addressed with additional restrictions. An app may be able to modify protected parts of the file system.

An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination.

An out-of-bounds write issue was addressed with improved bounds checking. The issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.

An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination.

An out-of-bounds write issue was addressed with improved bounds checking. The issue is fixed in macOS Golden Gate 27.2. Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory.

An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination.

An out-of-bounds read in macOS was addressed with improved bounds checking. An app may be able to cause unexpected system termination.

An out-of-bounds read in macOS was addressed with improved bounds checking. The issue affects macOS Golden Gate 27.2. An app may be able to cause unexpected system termination.