First published: Mon Mar 27 2017(Updated: )
Kernel. An off-by-one issue was addressed through improved bounds checking.
Credit: Ian Beer Google Project Zero product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS, iPadOS, and watchOS | <10.3 | 10.3 |
iOS | <=10.2.1 | |
Apple iOS and macOS | <=10.12.3 | |
tvOS | <=10.1.1 | |
Apple iOS, iPadOS, and watchOS | <=3.1.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2017-2474 has a high severity rating due to an off-by-one error that can lead to security vulnerabilities.
To fix CVE-2017-2474, update affected Apple devices to iOS version 10.3 or later, macOS version 10.12.4 or later, tvOS version 10.2 or later, and watchOS version 3.2 or later.
CVE-2017-2474 affects iOS versions prior to 10.3, macOS versions prior to 10.12.4, tvOS versions prior to 10.2, and watchOS versions prior to 3.2.
CVE-2017-2474 is considered a local vulnerability, as it requires local access to exploit.
CVE-2017-2474 involves the Kernel component of affected Apple operating systems.