| |
ID ▼ |
Type ▼ |
Status ▼ |
Priority ▼ |
Milestone ▼ |
Owner ▼ |
Summary + Labels ▼ |
... |
|---|
|
|
314 |
----
|
Fixed
|
----
|
----
|
ianbeer@google.com
|
OS X privilege escalation due to bad error handling in Install.framework suid helper
CCProjectZeroMembers
|
|
|
|
327 |
----
|
Fixed
|
----
|
----
|
ianbeer@google.com
|
OS X IOKit kernel code execution due to lack of bounds checking in IGAccelVideoContextMain::patch_encoding_common
CCProjectZeroMembers
|
|
|
|
328 |
----
|
Fixed
|
----
|
----
|
ianbeer@google.com
|
OS X IOKit kernel code execution due to lack of bounds checking in IGAccelGLContext::BindQueryBufferMultiple
CCProjectZeroMembers
|
|
|
|
329 |
----
|
Fixed
|
----
|
----
|
ianbeer@google.com
|
OS X IOKit kernel code execution due to lack of bounds checking in IGAccelVideoContextMedia::process_token_JPEGDecode
CCProjectZeroMembers
|
|
|
|
331 |
----
|
Fixed
|
----
|
----
|
ianbeer@google.com
|
OS X IOKit kernel code execution due to lack of bounds checking in IGAccelVideoContextMain::process_token_JPEGBLF
CCProjectZeroMembers
|
|
|
|
332 |
----
|
Fixed
|
----
|
----
|
ianbeer@google.com
|
OS X IOKit kernel code execution due to lack of bounds checking in IGAccelVideoContextMain::process_token_AllPostProcGVA
CCProjectZeroMembers
|
|
|
|
333 |
----
|
Fixed
|
----
|
----
|
ianbeer@google.com
|
OS X IOKit kernel code execution due to lack of bounds checking in IGAccelVideoContextMain::process_token_AllPostProcGVA and patch_vphal_ssh_instance
CCProjectZeroMembers
|
|
|
|
334 |
----
|
Fixed
|
----
|
----
|
ianbeer@google.com
|
OS X IOKit kernel code execution due to use of IOAccelSurface2::convertGLIndexToBufferIndex error code return value as buffer index
CCProjectZeroMembers
|
|
|
|
341 |
----
|
Fixed
|
----
|
----
|
ianbeer@google.com
|
OS X IOKit kernel code execution due to insufficient bounds checking in nvidia GeForce command buffer processing
CCProjectZeroMembers
|
|
|
|
343 |
----
|
Fixed
|
----
|
----
|
ianbeer@google.com
|
OS X arbitrary file creation as root due to kextd trusting path components in Distributed Notification messages
CCProjectZeroMembers
|
|
|
|
353 |
----
|
Fixed
|
----
|
----
|
ianbeer@google.com
|
OS X kextd bad path checking and toctou allow a regular user to load an unsigned kernel extension
CCProjectZeroMembers
|
|
|
|
394 |
----
|
Fixed
|
----
|
----
|
ianbeer@google.com
|
OS X HFS_EXTEND_FS sysctl discloses uninitialized kernel stack memory to userspace
CCProjectZeroMembers
|
|