First published: Mon Feb 20 2017(Updated: )
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ICU" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
iStyle @cosme iPhone OS | <=10.1.1 | |
Apple iOS and macOS | <=10.12.1 | |
Apple iOS, iPadOS, and watchOS | <=2.2.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-7594 is classified as a high severity vulnerability due to the potential for arbitrary code execution and denial of service.
To fix CVE-2016-7594, users should update their Apple devices to the latest versions of iOS, macOS, or watchOS as applicable.
CVE-2016-7594 affects iOS versions before 10.2, macOS versions before 10.12.2, and watchOS versions before 3.1.3.
CVE-2016-7594 allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption.
CVE-2016-7594 was discovered and disclosed in 2016.