HIGH
The Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app
Published May 20, 2016
7.8
HIGHCVSS 3.0
EPSS 1.61%
Description
The Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Affected products
Remediation
No remediation recorded yet.
Weaknesses (1)
References (11)
- http://lists.apple.com/archives/security-announce/2016/May/msg00001.html vendor-advisoryx_refsource_APPLEMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/May/msg00002.html vendor-advisoryx_refsource_APPLEMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/May/msg00003.html vendor-advisoryx_refsource_APPLEMailing ListVendor Advisory
- http://lists.apple.com/archives/security-announce/2016/May/msg00004.html vendor-advisoryx_refsource_APPLEMailing ListVendor Advisory
- http://www.securityfocus.com/bid/90694 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1035890 vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-2903 Advisory
- https://support.apple.com/HT206564 x_refsource_CONFIRMVendor Advisory
- https://support.apple.com/HT206566 x_refsource_CONFIRMVendor Advisory
- https://support.apple.com/HT206567 x_refsource_CONFIRMVendor Advisory
- https://support.apple.com/HT206568 x_refsource_CONFIRMVendor Advisory
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apple
Published May 20, 2016
Updated Aug 5, 2024
Reserved Jan 13, 2016
Link CVE-2016-1808
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2016-2903 Assigner apple
Published May 20, 2016
Updated Aug 5, 2024
Exploited since n/a
Link EUVD-2016-2903