CVE-2015-5939: Buffer Overflow
ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5936, and CVE-2015-5937.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5939?
CVE-2015-5939 is considered a critical vulnerability as it allows remote attackers to execute arbitrary code or cause denial of service.
How do I fix CVE-2015-5939?
To fix CVE-2015-5939, update your Apple iOS to 9.1, OS X to 10.11.1, and watchOS to 2.0.1 or later.
Which versions of software are affected by CVE-2015-5939?
CVE-2015-5939 affects Apple iOS versions prior to 9.1, OS X versions prior to 10.11.1, and watchOS versions prior to 2.0.1.
What types of attacks are possible due to CVE-2015-5939?
CVE-2015-5939 can be exploited by attackers to execute arbitrary code or cause a denial of service through crafted image metadata.
Is there any workaround for CVE-2015-5939 if I cannot update?
There are no known workarounds for CVE-2015-5939 other than updating to the appropriate versions of the affected software.