CVE-2016-1823 in Apple macOS

Zusammenfassung (Englisch)

The IOHIDDevice::handleReportWithTime function in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (out-of-bounds read and memory corruption) via a crafted IOHIDReportType enum, which triggers an incorrect cast, a different vulnerability than CVE-2016-1824.

Reservieren

13.01.2016

Veröffentlichung

20.05.2016

Einträge

VulDB provides additional information and datapoints for this CVE:

ID	Schwachstelle	CWE	Aus	Mas	CVE
94390	Apple macOS IOHIDFamily Information Disclosure	125	Proof-of-Concept	Offizieller Fix	CVE-2016-1823
87504	Apple iOS IOHIDFamily Pufferüberlauf	119	Proof-of-Concept	Offizieller Fix	CVE-2016-1823
87463	Apple Mac OS X IOHIDFamily Information Disclosure	125	Proof-of-Concept	Offizieller Fix	CVE-2016-1823

Quellen

• MITRE
• NVD
• CVE Details