First published: Fri Oct 23 2015(Updated: )
The kernel in Apple iOS before 9.1 and OS X before 10.11.1 mishandles reuse of virtual memory, which allows attackers to cause a denial of service via a crafted app.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS and macOS | <=10.11.0 | |
iStyle @cosme iPhone OS | <=9.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-6994 has a high severity level due to its potential to cause denial of service attacks.
To fix CVE-2015-6994, users should update their devices to the latest versions, iOS 9.1 or OS X 10.11.1 and later.
CVE-2015-6994 affects iOS versions prior to 9.1 and OS X versions prior to 10.11.1.
CVE-2015-6994 allows attackers to exploit virtual memory reuse, which can lead to device crashes and denial of service.
There are no known workarounds for CVE-2015-6994; updating to the patched versions is recommended.