CVE-2016-4609: Buffer Overflow
libxslt in Apple iOS before 9.3.3, OS X before 10.11.6, iTunes before 12.4.2 on Windows, iCloud before 5.2.1 on Windows, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2016-4607, CVE-2016-4608, CVE-2016-4610, and CVE-2016-4612.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4609?
CVE-2016-4609 is classified as a denial of service vulnerability due to memory corruption in the libxslt library.
How do I fix CVE-2016-4609?
To resolve CVE-2016-4609, update libxslt to the latest version prior to 1.1.29 or upgrade your affected Apple devices to the latest supported operating systems.
What platforms are affected by CVE-2016-4609?
CVE-2016-4609 affects Apple iOS, macOS, tvOS, watchOS, iTunes on Windows, and iCloud on Windows.
Can CVE-2016-4609 lead to data loss?
While CVE-2016-4609 primarily causes denial of service, it may also result in unspecified other impacts, potentially including data loss.
Is there any workaround for CVE-2016-4609?
There are no known workarounds for CVE-2016-4609; the best mitigation is to apply the necessary updates.