CVE-2015-3689: Improper Restriction of Operations within the Bounds of a Memory Buffer

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3687, and CVE-2015-3688...

CVE-2015-3686: Improper Restriction of Operations within the Bounds of a Memory Buffer

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3687, CVE-2015-3688, and CVE-2015-3689...

CVE-2015-3721: Exposure of Sensitive Information to an Unauthorized Actor

The kernel in Apple iOS before 8.4 and OS X before 10.10.4 does not properly handle HFS parameters, which allows attackers to obtain sensitive memory-layout information via a crafted app...

CVE-2015-3688: Improper Restriction of Operations within the Bounds of a Memory Buffer

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3687, and CVE-2015-3689...

CVE-2015-3659: Undefined Security Weakness

The SQLite authorizer in the Storage functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7, as used in Apple iOS before 8.4 and other products, does not properly restrict access to SQL functions, which allows remote attackers to execute arbitrary code or cau...

CVE-2015-3726: Improper Input Validation

The Telephony subsystem in Apple iOS before 8.4 allows physically proximate attackers to execute arbitrary code via a crafted 1 SIM or 2 UIM card...

CVE-2015-3725: Undefined Security Weakness

MobileInstallation in Apple iOS before 8.4 does not ensure the uniqueness of Watch bundle IDs, which allows attackers to cause a denial of service ID collision and Watch launch outage via a crafted universal provisioning profile app...

CVE-2015-3717: Buffer Copy without Checking Size of Input

Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause a denial of service application crash via unspecified vectors...

PT-2015-6282

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4 Apple OS X versions prior to 10.10.4 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via crafted credentials in a URL. This is relate...

CVE-2015-3687: Improper Restriction of Operations within the Bounds of a Memory Buffer

CoreText in Apple iOS before 8.4 and OS X before 10.10.4 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted text file, a different vulnerability than CVE-2015-3685, CVE-2015-3686, CVE-2015-3688, and CVE-2015-3689...

PT-2015-6308

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4 Apple OS X versions prior to 10.10.4 Description The issue allows remote attackers to trigger a refresh operation and cause a visit to an arbitrary web site via a crafted HTML e-mail message. Recommendations For...

Apple iOS text file handling memory corruption vulnerability (CNVD-2015-04292)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Apple iOS's handling of ICC files, which allows attackers to construct malicious PDF files and trick users into parsing them, which can execute arbitrary code...

Apple iOS text file handling memory corruption vulnerability (CNVD-2015-04308)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the handling of text files in Apple iOS, which allows attackers to construct malicious text files and trick users into parsing them, which can execute arbitrary...

Apple iOS text file handling memory corruption vulnerability (CNVD-2015-04309)

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in the handling of text files in Apple iOS, which allows attackers to construct malicious text files and trick users into parsing them, which can execute arbitrary...

Apple iOS Malicious SIM Input Verification Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS parses SIM/UIM loads in the presence of input validation, allowing attackers to exploit the vulnerability to execute arbitrary code using a malicious SIM card...

Apple iOS SQLite Buffer Overflow Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Multiple buffer overflows in the printf implementation of Apple iOS SQLite allow attackers to exploit vulnerabilities to conduct denial of service attacks or execute arbitrary code...

PT-2015-6325

Name of the Vulnerable Software and Affected Versions Apple Safari versions 6.2.7 and earlier, 7.x through 7.1.6, and 8.x through 8.0.6 Apple iOS versions prior to 8.4 Description The issue allows remote attackers to access an arbitrary web site's database via a crafted web site, due to improper...

PT-2015-6288

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.4 Apple OS X versions prior to 10.10.4 Description The issue allows attackers to obtain sensitive memory-layout information for the kernel via a crafted app. This is related to the DiskImages subsystem...

Apple iOS ICC Profile tag count Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple iOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of ICC...

Apple iOS ICC Profile curv Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple iOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of ICC...