| |
ID ▼ |
Type ▼ |
Status ▼ |
Priority ▼ |
Milestone ▼ |
Owner ▼ |
Summary + Labels ▼ |
... |
|---|
|
|
36 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
OS X IOKit kernel code execution due to lack of bounds checking in AppleMultitouchIODataQueue
|
|
|
|
39 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
OS X IOKit kernel code execution due to integer overflow in IODataQueue::enqueue
|
|
|
|
40 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
OS X IOKit kernel code execution due to heap overflow in IOHIKeyboardMapper::parseKeyMapping
|
|
|
|
41 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
OS X IOKit kernel code execution due to NULL pointer dereference in IOHIKeyboardMapper::stickyKeysfree
|
|
|
|
42 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
OS X IOKit kernel memory disclosure due to lack of bounds checking in IOHIKeyboardMapper::modifierSwapFilterKey
|
|
|
|
542 |
----
|
Fixed
|
----
|
----
|
ianbeer@google.com
|
iOS and OS X kernel code execution via double-delete in IOHIDEventQueue::start due to incorrect error handling
CCProjectZeroMembers
|
|
|
|
543 |
----
|
Fixed
|
----
|
----
|
ianbeer@google.com
|
iOS and OS X kernel code execution due to integer overflow in NECP system control socket packet parsing
CCProjectZeroMembers
|
|
|
|
553 |
----
|
Fixed
|
----
|
----
|
ianbeer@google.com
|
OS X and iOS unsandboxable kernel use-after-free in mach vouchers
CCProjectZeroMembers
|
|
|
|
561 |
----
|
Duplicate
|
----
|
----
|
ianbeer@google.com
|
IOKit doesn't correctly handle spoofed no-more-senders notifications leading to many bugs (OS X and iOS)
CCProjectZeroMembers
|
|