CVE-2019-8759
https://notcve.org/view.php?id=CVE-2019-8759
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. A local user may be able to cause unexpected system termination or read kernel memory. Se abordó una lectura fuera de límites con una comprobación de límites mejorada. Este problema se corrigió en macOS Catalina versión 10.15.1, Security Update 2019-001 y Security Update 2019-006, macOS Catalina versión 10.15. • https://support.apple.com/en-us/HT210634 https://support.apple.com/en-us/HT210722 • CWE-125: Out-of-bounds Read •
CVE-2019-8761
https://notcve.org/view.php?id=CVE-2019-8761
This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. Parsing a maliciously crafted text file may lead to disclosure of user information. Este problema se corrigió con comprobaciones mejoradas. Este problema se corrigió en macOS Catalina versión 10.15.1, Security Update 2019-001 y Security Update 2019-006, macOS Catalina versión 10.15. • https://support.apple.com/en-us/HT210634 https://support.apple.com/en-us/HT210722 https://www.paulosyibelo.com/2021/04/this-man-thought-opening-txt-file-is.html •
CVE-2019-8767
https://notcve.org/view.php?id=CVE-2019-8767
A memory consumption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. Processing a maliciously crafted string may lead to heap corruption. Se abordó un problema de consumo de memoria con un manejo de la memoria mejorada. Este problema se corrigió en macOS Catalina versión 10.15.1, Security Update 2019-001 y Security Update 2019-006, macOS Catalina versión 10.15. • https://support.apple.com/en-us/HT210634 https://support.apple.com/en-us/HT210722 • CWE-787: Out-of-bounds Write •
CVE-2019-8801
https://notcve.org/view.php?id=CVE-2019-8801
A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes for Windows 12.10.2. Running the iTunes installer in an untrusted directory may result in arbitrary code execution. Un problema de carga dinámica de la biblioteca existía en la configuración de iTunes. • https://support.apple.com/HT210722 https://support.apple.com/HT210726 • CWE-426: Untrusted Search Path •
CVE-2019-8737
https://notcve.org/view.php?id=CVE-2019-8737
A denial of service issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. An attacker in a privileged position may be able to perform a denial of service attack. Se abordó un problema de denegación de servicio con una comprobación mejorada. Este problema se corrigió en macOS Catalina versión 10.15.1, Security Update 2019-001 y Security Update 2019-006, macOS Catalina versión 10.15. • https://support.apple.com/en-us/HT210634 https://support.apple.com/en-us/HT210722 • CWE-20: Improper Input Validation •