A memory corruption issue was addressed with improved state management. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local attacker may be able to elevate their privileges.
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://support.apple.com/en-us/HT212804 | release notes vendor advisory |
https://support.apple.com/en-us/HT212805 | release notes vendor advisory |
https://www.zerodayinitiative.com/advisories/ZDI-22-355/ | vdb entry third party advisory |