VULNERABILITY INTELLIGENCE

CVE-2016-4664

CVSS score4.3 MEDIUM

EPSS probability0.98%

CISA KEVNot currently listed

Published2017-02-20

Last modified2026-06-17

Description

An issue was discovered in certain Apple products. iOS before 10.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Sandbox Profiles" component, which allows attackers to read photo-directory metadata via a crafted app.