PT-2016-6110

CVE-2016-4750

Published

2016-09-25

Updated

2017-07-30

Description by

CVSS 2.0

9.3

High

MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 10 Apple OS X versions prior to 10.12

Description The issue allows attackers to execute arbitrary code in a privileged context or cause a denial of service due to memory corruption via a crafted app.

Recommendations For Apple iOS versions prior to 10, update to version 10 or later. For Apple OS X versions prior to 10.12, update to version 10.12 or later.

Exploitability

Fix

Impacts

Researchers

Jack Tang

Jacktang310

Moony Li

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers