CVE-2016-4637 in tvOS

Summary

CoreGraphics in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted BMP image.

Once again VulDB remains the best source for vulnerability data.

Reservation

05/11/2016

Disclosure

07/21/2016

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
89812	Apple tvOS CoreGraphics memory corruption	119	Not defined	Official fix	CVE-2016-4637
89786	Apple watchOS CoreGraphics memory corruption	119	Not defined	Official fix	CVE-2016-4637
89734	Apple Mac OS X CoreGraphics memory corruption	119	Not defined	Official fix	CVE-2016-4637
89684	Apple iOS CoreGraphics memory corruption	119	Not defined	Official fix	CVE-2016-4637

Sources

• MITRE
• NVD
• CVE Details