CVE-2015-5874 in Watch

Summary

CoreText in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

08/06/2015

Disclosure

09/18/2015

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
78094	Apple Watch CoreText memory corruption	119	Not defined	Official fix	CVE-2015-5874
77883	Apple iTunes memory corruption	119	Not defined	Official fix	CVE-2015-5874
77778	Apple iOS CoreText memory corruption	119	Not defined	Official fix	CVE-2015-5874
77777	Apple iOS CoreCrypto Private Key memory corruption	119	Not defined	Official fix	CVE-2015-5874

Sources

• MITRE
• NVD
• CVE Details