CVE-2016-7595: Buffer Overflow
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreText" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7595?
CVE-2016-7595 is classified as a high-severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2016-7595?
To fix CVE-2016-7595, users should update their devices to iOS 10.2, macOS 10.12.2, or watchOS 3.1.3 or later.
Which Apple products are affected by CVE-2016-7595?
CVE-2016-7595 affects iOS devices prior to version 10.2, macOS versions prior to 10.12.2, and watchOS devices prior to 3.1.3.
What type of attack does CVE-2016-7595 facilitate?
CVE-2016-7595 allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption.
When was CVE-2016-7595 disclosed?
CVE-2016-7595 was disclosed on December 12, 2016.