A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to execute arbitrary code with kernel privileges.

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. An application may be able to execute arbitrary code with kernel privileges.

A flaw was found in WebKitGTK.

Impact: A remote attacker may be able to cause arbitrary code execution. Description: A logic issue was addressed with improved restrictions.

Reference: https://webkitgtk.org/security/WSA-2021-0002.html

A flaw was found in WebKitGTK.

Impact: A remote attacker may be able to cause arbitrary code execution. Description: A logic issue was addressed with improved restrictions.

Reference: https://webkitgtk.org/security/WSA-2021-0003.html

AMD. A buffer overflow issue was addressed with improved memory handling.

A buffer overflow flaw in httpd's lua module could allow an out-of-bounds write. An attacker who is able to submit a crafted request to an httpd instance that is using the lua module may be able to cause an impact to confidentiality, integrity, and/or availability.

A flaw was found in httpd. The inbound connection is not closed when it fails to discard the request body, which may expose the server to HTTP request smuggling.

AMD Kernel. A memory corruption issue was addressed with improved input validation.

AMD Kernel. A memory corruption issue was addressed with improved input validation.

ActionKit. An input validation issue was addressed with improved input validation.

AMD Kernel. A memory corruption issue was addressed with improved input validation.

AMD Kernel. A memory corruption issue was addressed with improved input validation.

ActionKit. An input validation issue was addressed with improved input validation.

A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. A malicious application may be able to gain root privileges.

A flaw was found in httpd, where it incorrectly limits the value of the LimitXMLRequestBody option. This issue can lead to an integer overflow and later causes an out-of-bounds write.