CVE-2016-4629

CVE-2016-4629 affects Apple’s OS X ImageIO (OS X before 10.11.6). A crafted EXR image can trigger memory corruption via signed xStride/yStride values, enabling remote code execution or a denial of service. Apple lists OS X 10.11.6 (El Capitan) and Security Update 2016-004 as the fix; patching is ...

CVE-2014-9862

Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow via a crafted patch file...

CVE-2016-4646

CVE-2016-4646 affects Apple OS X before 10.11.6, where the audio decoding path mishandles a size value, enabling a remote attacker to read memory out-of-bounds to disclose data or trigger a denial of service via a crafted audio file. The issue is categorized as an out-of-bounds read in the Audio ...

CVE-2016-4634

CVE-2016-4634 affects the Graphics Drivers component in OS X El Capitan (and OS X versions up to 10.11.x prior to 10.11.6). The issue enables a local attacker to gain privileges or cause a denial of service via memory corruption. Apple’s security content shows this vulnerability addressed in the ...

CVE-2016-4601

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted SGI image...

CVE-2016-4638

CVE-2016-4638 corresponds to a local privilege-escalation in the OS X Login Window prior to OS X 10.11.6. Multiple connected sources attribute the flaw to a type-confusion in WindowServer/CoreGraphics handling of user-supplied data, enabling a crafted app to gain root-level/privilege access. Expl...

CVE-2016-4639

Login Window in Apple OS X before 10.11.6 does not properly initialize memory, which allows local users to cause a denial of service via unspecified vectors...

CVE-2016-4600

Affected software: OS X El Capitan (10.11) and later with QuickTime. Vulnerability details: CVE-2016-4600 describes a memory corruption weakness in QuickTime triggered by a crafted FlashPix bitmap image, enabling a remote attacker to execute arbitrary code or cause a denial of service. Root cause...

CVE-2016-4597

CVE-2016-4597 affects QuickTime in Apple OS X prior to 10.11.6. A remote attacker could cause arbitrary code execution or a denial of service by a crafted FlashPix bitmap image due to a memory corruption issue. Root cause and affected components are described in accompanying CNVD listings for Qui...

CVE-2016-4602

QuickTime in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted FlashPix bitmap image, a different vulnerability than CVE-2016-4596, CVE-2016-4597, and CVE-2016-4600...

CVE-2016-4647

Audio in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service memory corruption via a crafted file...

CVE-2016-4621

libc++abi in Apple OS X before 10.11.6 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-1863

The kernel in Apple iOS before 9.3.3, OS X before 10.11.6, tvOS before 9.2.2, and watchOS before 2.2.2 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4582 and CVE-2016-4653...

CVE-2016-4630

CVE-2016-4630 : Apple ImageIO on OS X (EXR/B44 compression) is affected by a memory-corruption vulnerability that can enable remote code execution when processing crafted EXR images. Disclosed in 2016 with public exploit details showing a heap-based overflow risk due to improper handling of B44 c...

Apple OS X DspFuncLib Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Apple OS X AppleIntelBDWGraphics Memory Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

Apple OS X ACMP4AACBaseDecoder Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to leak sensitive information on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of M...

Apple OS X DspFuncLib Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Apple OS X WindowServer Memory Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within CoreGraphics. By...

Apple OS X IOPMrootDomain Memory Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within IOPMrootDomain. By...