First published: Mon May 22 2017(Updated: )
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Safari | <=10.1 | |
Apple iPhone OS | <=10.3.1 | |
tvOS | <=10.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-2531 has a high severity rating due to its potential for remote code execution.
CVE-2017-2531 affects iOS versions before 10.3.2, Safari versions before 10.1.1, and tvOS versions before 10.2.1.
To fix CVE-2017-2531, update your affected Apple devices to the latest versions of iOS, Safari, or tvOS.
CVE-2017-2531 involves the WebKit component of affected Apple products.
Yes, CVE-2017-2531 can lead to memory corruption, potentially resulting in data loss.