CVE-2016-1856

Name of the Vulnerable Software and Affected Versions Apple Safari (affected versions not specified) iOS (affected versions not specified)

Description The issue is caused by a buffer overflow in the WebKit component. It may allow a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) by using a specially crafted website. The vulnerability can be exploited through a remote code execution in Apple Safari, related to a use-after-free issue in the TextTrack Object.

Recommendations For Apple Safari, consider restricting access to potentially vulnerable web pages until a patch is available. For iOS, as a temporary workaround, consider disabling the WebKit-related functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.