CVSS: 7.8EPSS: 0%CPEs: -EXPL: 0CVE-2024-47900 – GPU DDK - Multiple integer overflow in DmaTransfer PMR_DevPhysAddr functions leading to OOB writes
https://notcve.org/view.php?id=CVE-2024-47900
31 Jan 2025 — Software installed and run as a non-privileged user may conduct improper GPU system calls to access OOB kernel memory. • https://www.imaginationtech.com/gpu-driver-vulnerabilities • CWE-823: Use of Out-of-range Pointer Offset •
CVSS: 5.7EPSS: 0%CPEs: 1EXPL: 0CVE-2017-13318
https://notcve.org/view.php?id=CVE-2017-13318
28 Jan 2025 — In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. • https://source.android.com/security/bulletin/pixel/2018-05-01 • CWE-125: Out-of-bounds Read CWE-190: Integer Overflow or Wraparound •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2025-24130 – Apple Security Advisory 01-27-2025-6
https://notcve.org/view.php?id=CVE-2025-24130
27 Jan 2025 — An app may be able to modify protected parts of the file system. macOS Sequoia 15.3 addresses buffer overflow, bypass, code execution, information leakage, integer overflow, null pointer, out of bounds read, out of bounds write, spoofing, and use-after-free vulnerabilities. • https://support.apple.com/en-us/122068 •
CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2025-24126 – Apple Security Advisory 01-27-2025-8
https://notcve.org/view.php?id=CVE-2025-24126
27 Jan 2025 — An attacker on the local network may be able to cause unexpected system termination or corrupt process memory. macOS Sequoia 15.3 addresses buffer overflow, bypass, code execution, information leakage, integer overflow, null pointer, out of bounds read, out of bounds write, spoofing, and use-after-free vulnerabilities. • https://support.apple.com/en-us/122066 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2025-24096 – Apple Security Advisory 01-27-2025-4
https://notcve.org/view.php?id=CVE-2025-24096
27 Jan 2025 — A malicious app may be able to access arbitrary files. macOS Sequoia 15.3 addresses buffer overflow, bypass, code execution, information leakage, integer overflow, null pointer, out of bounds read, out of bounds write, spoofing, and use-after-free vulnerabilities. • https://support.apple.com/en-us/122068 • CWE-862: Missing Authorization •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2025-24106 – Apple Security Advisory 01-27-2025-6
https://notcve.org/view.php?id=CVE-2025-24106
27 Jan 2025 — Parsing a file may lead to an unexpected app termination. macOS Sequoia 15.3 addresses buffer overflow, bypass, code execution, information leakage, integer overflow, null pointer, out of bounds read, out of bounds write, spoofing, and use-after-free vulnerabilities. • https://support.apple.com/en-us/122068 •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2025-24151 – Apple Security Advisory 01-27-2025-6
https://notcve.org/view.php?id=CVE-2025-24151
27 Jan 2025 — An app may be able to cause unexpected system termination or corrupt kernel memory. macOS Sequoia 15.3 addresses buffer overflow, bypass, code execution, information leakage, integer overflow, null pointer, out of bounds read, out of bounds write, spoofing, and use-after-free vulnerabilities. • https://support.apple.com/en-us/122068 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2025-24146 – Apple Security Advisory 01-27-2025-6
https://notcve.org/view.php?id=CVE-2025-24146
27 Jan 2025 — Deleting a conversation in Messages may expose user contact information in system logging. macOS Sequoia 15.3 addresses buffer overflow, bypass, code execution, information leakage, integer overflow, null pointer, out of bounds read, out of bounds write, spoofing, and use-after-free vulnerabilities. • https://support.apple.com/en-us/122068 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0CVE-2025-24107 – Apple Security Advisory 01-27-2025-8
https://notcve.org/view.php?id=CVE-2025-24107
27 Jan 2025 — A malicious app may be able to gain root privileges. macOS Sequoia 15.3 addresses buffer overflow, bypass, code execution, information leakage, integer overflow, null pointer, out of bounds read, out of bounds write, spoofing, and use-after-free vulnerabilities. • https://support.apple.com/en-us/122066 • CWE-276: Incorrect Default Permissions •
CVSS: 3.3EPSS: 0%CPEs: 2EXPL: 0CVE-2024-44172 – Apple Security Advisory 01-27-2025-6
https://notcve.org/view.php?id=CVE-2024-44172
27 Jan 2025 — An app may be able to access contacts. macOS Sonoma 14.7.3 addresses bypass, code execution, integer overflow, out of bounds read, and out of bounds write vulnerabilities. • https://support.apple.com/en-us/121238 • CWE-863: Incorrect Authorization •