CVE-2017-2513: SQL Injection
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "SQLite" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SQL statement.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2513?
CVE-2017-2513 is classified as high severity due to the potential for remote code execution.
How do I fix CVE-2017-2513?
To fix CVE-2017-2513, update your affected Apple device to the latest version of iOS, macOS, tvOS, or watchOS.
What devices are affected by CVE-2017-2513?
CVE-2017-2513 affects iOS versions prior to 10.3.2, macOS versions before 10.12.5, tvOS versions before 10.2.1, and watchOS versions before 3.2.2.
What is a use-after-free vulnerability in CVE-2017-2513?
A use-after-free vulnerability in CVE-2017-2513 allows attackers to exploit memory errors, potentially executing arbitrary code on the device.
Can CVE-2017-2513 affect my privacy?
Yes, if exploited, CVE-2017-2513 could lead to unauthorized access to sensitive information on an affected device.