First published: Mon Mar 27 2017(Updated: )
ImageIO. A memory corruption issue was addressed through improved input validation.
Credit: CVE-2017-2467 product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS | <10.3 | 10.3 |
Apple iPhone OS | <=10.2.1 | |
macOS Yosemite | <=10.12.3 | |
tvOS | <=10.1.1 | |
watchOS | <=3.1.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2017-2467 has been classified as a high-severity vulnerability due to its potential for memory corruption.
CVE-2017-2467 affects iOS versions prior to 10.3, macOS versions before 10.12.4, tvOS versions before 10.2, and watchOS versions before 3.2.
To fix CVE-2017-2467, upgrade to iOS 10.3 or later, macOS 10.12.4 or later, tvOS 10.2 or later, and watchOS 3.2 or later.
CVE-2017-2467 involves the ImageIO component of affected Apple products.
CVE-2017-2467 may allow an attacker to exploit the vulnerability to execute arbitrary code via maliciously crafted images.