CVE-2015-5937: Buffer Overflow
ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5936, and CVE-2015-5939.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5937?
CVE-2015-5937 has a high severity as it allows remote attackers to execute arbitrary code or cause a denial of service.
How do I fix CVE-2015-5937?
To fix CVE-2015-5937, update your Apple devices to at least iOS 9.1, OS X 10.11.1, or watchOS 2.0.1.
What devices are affected by CVE-2015-5937?
CVE-2015-5937 affects Apple iPhone OS versions prior to 9.1, macOS versions prior to 10.11.1, and watchOS versions prior to 2.0.1.
What type of attacks does CVE-2015-5937 facilitate?
CVE-2015-5937 facilitates remote code execution and denial of service attacks through crafted image metadata.
Is there a workaround for CVE-2015-5937?
There is no documented workaround for CVE-2015-5937; updating the affected software is recommended.