First published: Mon Feb 20 2017(Updated: )
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
iPhone OS | <=10.1.1 | |
Apple iOS and macOS | <=10.12.1 | |
Apple iOS, iPadOS, and watchOS | <=2.2.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-7659 is a high severity vulnerability that can allow remote attackers to execute arbitrary code.
To fix CVE-2016-7659, users should update their affected devices to the latest versions of iOS, macOS, or watchOS.
CVE-2016-7659 affects devices running iOS versions before 10.2, macOS versions before 10.12.2, and watchOS versions before 3.1.3.
CVE-2016-7659 can lead to remote code execution and denial of service through memory corruption.
There are no specific workarounds for CVE-2016-7659; updating devices is the recommended solution.