Unnamed Vulnerability in Apple iOS/tvOS/macOS/watchOS HTTPProtocol Component

iOS is a mobile operating system developed by Apple Inc. First announced at the Macworld conference on January 9, 2007, it was originally designed for use with the iPhone, and has since been applied to the iPod touch, iPad, and Apple TV. tvOS is an Apple-developed system based on iOS. tvOS is the...

The vulnerability of the nghttp2 library allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the nghttp2 library is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions or execute arbitrary code...

CVE-2015-8659

CVE-2015-8659 describes a heap-use-after-free in nghttp2’s idle stream handling, affecting nghttp2 versions prior to 1.6.0. Public documents associate this family of issue with nghttp2 prior to 1.6.0 potentially enabling remote code execution (as cited by Apple’s tvOS/iOS security notes and Gento...