CVE-2016-1818

Description

IOAcceleratorFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1817 and CVE-2016-1819.

Weakness classification

• CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references

• product-security@apple.com — Vendor Advisory
• product-security@apple.com — Vendor Advisory
• product-security@apple.com — Vendor Advisory
• product-security@apple.com — Vendor Advisory
• product-security@apple.com — Third Party Advisory, VDB Entry
• product-security@apple.com — Third Party Advisory, VDB Entry
• product-security@apple.com — Third Party Advisory, VDB Entry
• product-security@apple.com — Vendor Advisory
• product-security@apple.com — Vendor Advisory
• product-security@apple.com — Vendor Advisory
• product-security@apple.com — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory