CVE-2016-7595: Buffer Overflow
First published: Mon Feb 20 2017(Updated: )
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreText" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font.
Credit: product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| iPhone OS | <=10.1.1 | |
| Apple iOS and macOS | <=10.12.1 | |
| Apple iOS, iPadOS, and watchOS | <=2.2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-7595?
CVE-2016-7595 is classified as a high-severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2016-7595?
To fix CVE-2016-7595, users should update their devices to iOS 10.2, macOS 10.12.2, or watchOS 3.1.3 or later.
Which Apple products are affected by CVE-2016-7595?
CVE-2016-7595 affects iOS devices prior to version 10.2, macOS versions prior to 10.12.2, and watchOS devices prior to 3.1.3.
What type of attack does CVE-2016-7595 facilitate?
CVE-2016-7595 allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption.
When was CVE-2016-7595 disclosed?
CVE-2016-7595 was disclosed on December 12, 2016.
- agent/type
- agent/description
- agent/weakness
- agent/severity
- agent/references
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/apple
- canonical/iphone os
- version/iphone os/10.1.1
- canonical/apple ios and macos
- version/apple ios and macos/10.12.1
- canonical/apple ios, ipados, and watchos
- version/apple ios, ipados, and watchos/2.2.2