CVE-2017-7003 - An issue was discovered in certain Apple products

Back Back to CVE browser

MEDIUM

An issue was discovered in certain Apple products

Published Apr 3, 2018

5.5

MEDIUM

CVSS 3.0

EPSS 0.93%

Description

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to cause a denial of service (application crash) via a crafted file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (4)

https://support.apple.com/HT207797
x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT207798
x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT207800
x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT207801
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://support.apple.com/HT207797		x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT207798		x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT207800		x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT207801		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Apr 3, 2018

Updated Aug 5, 2024

Reserved Mar 17, 2017

Link CVE-2017-7003

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-7003

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-7003