PT-2016-1148

CVE-2016-1721

Published

2016-02-01

Updated

2019-03-22

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 9.2.1 OS X versions prior to 10.11.3 tvOS versions prior to 9.1.1

Description The issue allows local users to gain privileges or cause a denial of service due to memory corruption. It is caused by a buffer overflow in the kernel of the operating systems.

Recommendations For iOS versions prior to 9.2.1, update to version 9.2.1 or later. For OS X versions prior to 10.11.3, update to version 10.11.3 or later. For tvOS versions prior to 9.1.1, update to version 9.1.1 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Ian Beer

Ju Zhu

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers