CVE-2016-4690: Input Validation
Published Feb 20, 2017
·Updated
An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Image Capture" component, which allows attackers to execute arbitrary code via a crafted USB HID device.
Affected Software
1 affected component
apple iPhone OS<=10.1.1
Event History
Feb 20, 2017
CVE Published
via MITRE·08:35 AM
Data Sourced
via MITRE·08:35 AM
Description
Data Sourced
via NVD·08:59 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-4690?
CVE-2016-4690 is considered a high severity vulnerability due to its ability to allow arbitrary code execution.
2
How do I fix CVE-2016-4690?
To mitigate CVE-2016-4690, it is recommended to update iOS to version 10.2 or later.
3
What systems are affected by CVE-2016-4690?
CVE-2016-4690 affects iOS versions prior to 10.2 on certain Apple devices.
4
What kind of attack does CVE-2016-4690 enable?
CVE-2016-4690 allows attackers to execute arbitrary code via a specially crafted USB HID device.
5
Is there a known workaround for CVE-2016-4690?
There are no known workarounds for CVE-2016-4690 other than updating the affected iOS devices.