First published: Fri Sep 18 2015(Updated: )
IOStorageFamily in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local users to obtain sensitive information from kernel memory via unknown vectors.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iPhone OS | <=8.4.1 | |
macOS Yosemite | <=10.10.5 | |
watchOS | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-5863 is classified as a moderate severity vulnerability due to its potential to expose sensitive information.
To remediate CVE-2015-5863, update affected devices to the latest version of iOS, macOS, or watchOS as applicable.
CVE-2015-5863 affects devices running iOS before version 9, macOS Yosemite before version 10.10.5, and watchOS 1.0.
CVE-2015-5863 allows local users to potentially access sensitive information from kernel memory.
Local users on vulnerable versions of iOS, macOS, or watchOS are at risk of exploitation through CVE-2015-5863.