CVE-2016-4657: Apple iOS Webkit Memory Corruption Vulnerability
Apple iOS WebKit contains a memory corruption vulnerability that allows attackers to execute remote code or cause a denial-of-service (DoS) via a crafted web site. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
Other sources
WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4657?
CVE-2016-4657 is classified as a high severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2016-4657?
To fix CVE-2016-4657, update affected Apple iOS devices to the latest version of iOS beyond 9.3.5.
What are the consequences of exploiting CVE-2016-4657?
Exploiting CVE-2016-4657 can lead to remote code execution or denial-of-service (DoS) conditions on the affected device.
Which devices are affected by CVE-2016-4657?
CVE-2016-4657 affects Apple iOS devices running versions up to 9.3.4 and less than 9.3.5.
What causes CVE-2016-4657?
CVE-2016-4657 is caused by a memory corruption vulnerability in Apple iOS WebKit that can be triggered by a crafted website.