Cererdlong

**Name of the Vulnerable Software and Affected Versions** IOAcceleratorFamily versions prior to 10 (iOS) IOAcceleratorFamily versions prior to 10.12 (OS X) **Description** The issue is related to pointer dereference errors in the IOAcceleratorFamily component of the operating systems. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app. **Recommendations** For IOAcceleratorFamily versions prior to 10 (iOS), update to iOS 10 or later. For IOAcceleratorFamily versions prior to 10.12 (OS X), update to OS X 10.12 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 9 **Description** The issue is related to the IOAcceleratorFamily component in iOS, which lacks protection of internal data. This allows a remote attacker to obtain sensitive kernel memory-layout information via a crafted app, potentially giving access to protected information stored in memory. **Recommendations** For versions prior to 9, update to iOS version 9 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS (affected versions not specified) **Description** The issue is caused by a buffer overflow in the operating system's kernel. It may allow a local attacker to elevate privileges or cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 8.4.1 **Description** The issue is related to the Location Framework component in the iOS operating system, which has inadequate access control restrictions. This allows a local attacker to bypass existing access restrictions to filesystem objects using symbolic links. **Recommendations** For versions prior to 8.4.1, update to version 8.4.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 8.4.1 OS X versions prior to 10.10.5 **Description** The issue is related to the lack of protection for system data in iOS and Mac OS X. It can be exploited by a remote attacker using a specially crafted application to gain access to protected information. The kernel does not properly restrict the mach port space info interface, allowing attackers to obtain sensitive memory-layout information. **Recommendations** For iOS versions prior to 8.4.1, update to version 8.4.1 or later to resolve the issue. For OS X versions prior to 10.10.5, update to version 10.10.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 8.3 Apple TV versions prior to 7.2 **Description** The issue allows attackers to obtain sensitive information about kernel memory via a crafted app. This is related to the IOAcceleratorFamily component. **Recommendations** For Apple iOS versions prior to 8.3, update to version 8.3 or later. For Apple TV versions prior to 7.2, update to version 7.2 or later.