1505 matches found
CVE-2016-7643
CVE-2016-7643 affects Apple devices with ImageIO. A crafted web site can trigger an out-of-bounds read in ImageIO, leaking memory or causing a DoS. Affected: iOS <10.2, macOS <10.12.2, watchOS
CVE-2016-4671
An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write and application crash via a crafted PDF file...
CVE-2016-7643
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of servi...
CVE-2016-4682
CVE-2016-4682 affects Apple macOS prior to 10.12 (and 10.12 before 10.12.1) via the ImageIO SGI image parser. The issue is described as an out-of-bounds condition in SGI image parsing that can allow an unauthenticated, remote attacker to disclose memory contents or cause a denial of service (and,...
CVE-2016-4682
An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service out-of-bounds read and application crash via a...
CVE-2016-7643: Out-of-bounds Read
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of servi...
CVE-2016-4682: Out-of-bounds Read
An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain sensitive information or cause a denial of service out-of-bounds read and application crash via a...
CVE-2016-4671: Out-of-bounds Write
An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds write and application crash via a crafted PDF file...
CVE-2016-4683: Improper Restriction of Operations within the Bounds of a Memory Buffer
An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds memory access and application crash via a crafted SGI file...
PT-2017-1298
Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.1 Description The issue involves the ImageIO component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted PDF file. This is due to an out-of-bounds write and applicati...
PT-2017-1322
Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.1 Description The issue involves the ImageIO component and is related to an out-of-bounds read error in memory. It allows remote attackers to obtain sensitive information or cause a denial of service, such as...
PT-2017-1286
Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.2 macOS versions prior to 10.12.2 watchOS versions prior to 3.1.3 Description The issue involves the ImageIO component and allows remote attackers to obtain sensitive information from process memory or cause a denial o...
PT-2017-1321
Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.1 Description The issue involves the ImageIO component and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted SGI file. This is due to an out-of-bounds memory access, whic...
OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)
It was discovered that the 2D component of OpenJDK performed parsing of iTXt and zTXt PNG image chunks even when configured to ignore metadata. An attacker able to make a Java application parse a specially crafted PNG image could cause the application to consume an excessive amount of memory...
OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)
It was discovered that the 2D component of OpenJDK performed parsing of iTXt and zTXt PNG image chunks even when configured to ignore metadata. An attacker able to make a Java application parse a specially crafted PNG image could cause the application to consume an excessive amount of memory...
About the security content of tvOS 9.2.1 - Apple Support
For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...
About the security content of watchOS 2.2.1 - Apple Support
For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...
OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)
It was discovered that the 2D component of OpenJDK performed parsing of iTXt and zTXt PNG image chunks even when configured to ignore metadata. An attacker able to make a Java application parse a specially crafted PNG image could cause the application to consume an excessive amount of memory...
OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988)
It was discovered that the 2D component of OpenJDK performed parsing of iTXt and zTXt PNG image chunks even when configured to ignore metadata. An attacker able to make a Java application parse a specially crafted PNG image could cause the application to consume an excessive amount of memory...
