An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that triggers a SetAppSupportBits use-after-free because of a race condition.
Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.5 se han visto afectadas. El problema afecta al componente "NVIDIA Graphics Driver". Permite a los atacantes ejecutar código arbitrario en un contexto privilegiado mediante una app manipulada que desencadena un uso de memoria previamente liberada en SetAppSupportBits debido a una condición de carrera.
macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, and Security Update 2018-003 El Capitan are now available and address buffer overflow, code execution, and denial of service vulnerabilities.
