CVE-2016-7663: Buffer Overflow
First published: Mon Feb 20 2017(Updated: )
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreFoundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted string.
Credit: product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| iStyle @cosme iPhone OS | <=10.1.1 | |
| Apple iOS and macOS | <=10.12.1 | |
| Apple iOS, iPadOS, and watchOS | <=2.2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-7663?
CVE-2016-7663 is classified as a high severity vulnerability due to its ability to allow remote code execution.
How do I fix CVE-2016-7663?
To fix CVE-2016-7663, update affected Apple devices to the latest versions of iOS, macOS, or watchOS.
What products are affected by CVE-2016-7663?
CVE-2016-7663 affects iOS versions before 10.2, macOS versions before 10.12.2, and watchOS versions before 3.1.3.
Can CVE-2016-7663 lead to data breaches?
Yes, CVE-2016-7663 can potentially lead to data breaches as it allows attackers to execute arbitrary code remotely.
Is CVE-2016-7663 actively exploited in the wild?
There is no public information confirming that CVE-2016-7663 is actively exploited in the wild, but it remains a serious risk.
- agent/type
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/apple
- canonical/istyle @cosme iphone os
- version/istyle @cosme iphone os/10.1.1
- canonical/apple ios and macos
- version/apple ios and macos/10.12.1
- canonical/apple ios, ipados, and watchos
- version/apple ios, ipados, and watchos/2.2.2