Product:

Xcode

(Apple)
Repositories • https://github.com/apache/httpd
• https://github.com/visionmedia/send
#Vulnerabilities 77
Date Id Summary Products Score Patch Annotated
2019-12-18 CVE-2019-8722 Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege. Xcode N/A
2019-12-18 CVE-2019-8721 Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege. Xcode N/A
2019-12-18 CVE-2019-8724 Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege. Xcode N/A
2019-12-18 CVE-2019-8723 Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege. Xcode N/A
2019-04-03 CVE-2018-4357 A memory corruption issue was addressed with improved input validation. This issue affected versions prior to Xcode 10. Xcode 7.8
2018-04-03 CVE-2018-4164 An issue was discovered in certain Apple products. Xcode before 9.3 is affected. The issue, which is unspecified, involves the "LLVM" component. Xcode 9.8
2018-04-03 CVE-2017-7167 An issue was discovered in certain Apple products. Xcode before 9.2 is affected. The issue involves the "ld64" component. A buffer overflow allows remote attackers to execute arbitrary code via crafted source code. Xcode 7.8
2017-10-22 CVE-2017-7137 An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file. Xcode 7.8
2017-10-22 CVE-2017-7136 An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file. Xcode 7.8
2017-10-22 CVE-2017-7135 An issue was discovered in certain Apple products. Xcode before 9 is affected. The issue involves the "ld64" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted Mach-O file. Xcode 7.8