CVE-2015-3724

CVE-2015-3724 affects Apple iOS CoreGraphics. A memory corruption issue in handling ICC profiles inside PDFs can allow remote code execution or cause a denial of service. Affected: iOS prior to 8.4; vulnerable component: CoreGraphics (ICC profile processing). Impact: arbitrary code execution or s...

CVE-2015-3724

CoreGraphics in Apple iOS before 8.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted ICC profile in a PDF document, a different vulnerability than CVE-2015-3723...

CVE-2015-3719

CVE-2015-3719 affects TrueTypeScaler in FontParser in Apple iOS < 8.4 and OS X

CVE-2015-3717

CVE-2015-3717 describes multiple buffer overflows in SQLite’s printf functionality used by Apple iOS up to 8.4 and OS X up to 10.10.4, allowing remote code execution or a denial of service via unspecified vectors. The vulnerability affects the SQLite component embedded in Apple software (e.g., iT...

CVE-2015-3722

Application Store in Apple iOS before 8.4 does not ensure the uniqueness of bundle IDs, which allows attackers to cause a denial of service ID collision and launch outage via a crafted universal provisioning profile app...

CVE-2015-3686

Technical details for CVE-2015-3686 are not publicly provided in the supplied connected documents; the documents reference the CVE but do not specify affected products, root cause, impact, or remediation. Monitor for updates.

CVE-2015-3690

CVE-2015-3690 affects Apple’s DiskImages in iOS < 8.4 and OS X

CVE-2015-3719

TrueTypeScaler in FontParser in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-3694...

CVE-2015-3728

CVE-2015-3728 affects Apple iOS before 8.4. The issue is an insuffient comparison in the WiFi manager when evaluating known AP advertisements, allowing auto-association with an ESSID-bearing network that downgrades security. Impacted outcome focuses on an adjacent-network attack vector with parti...

PT-2015-6301

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4 Apple OS X versions prior to 10.10.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted TIFF image. Recommendations For...

PT-2015-6292

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4 Apple OS X versions prior to 10.10.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted font file. Recommendations For App...

PT-2015-6285

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3688, and CVE-2015-3689...

PT-2015-6317

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4 Apple OS X versions prior to 10.10.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted font file. Recommendations For App...

CVE-2015-3686: Improper Restriction of Operations within the Bounds of a Memory Buffer

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3687, CVE-2015-3688, and CVE-2015-3689...

CVE-2015-3688: Improper Restriction of Operations within the Bounds of a Memory Buffer

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3687, and CVE-2015-3689...

CVE-2015-3687: Improper Restriction of Operations within the Bounds of a Memory Buffer

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3688, and CVE-2015-3689...

CVE-2015-3689: Improper Restriction of Operations within the Bounds of a Memory Buffer

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3687, and CVE-2015-3688...

CVE-2015-3719: Improper Restriction of Operations within the Bounds of a Memory Buffer

TrueTypeScaler in FontParser in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-3694...

CVE-2015-3694: Improper Restriction of Operations within the Bounds of a Memory Buffer

FontParser in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-3719...

CVE-2015-3728: Undefined Security Weakness

The WiFi Connectivity feature in Apple iOS before 8.4 allows remote Wi-Fi access points to trigger an automatic association, with an arbitrary security type, by operating with a recognized ESSID within an 802.11 network's coverage area...