CVE-2016-1746

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.4

Description The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. It is caused by a buffer overflow in the IOGraphics component of the Mac OS X operating system. Exploitation of the issue may allow a remote attacker to execute arbitrary code in a privileged context or cause a denial of service.

Recommendations For Apple OS X versions prior to 10.11.4, update to version 10.11.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted apps to minimize the risk of exploitation.