CVE-2016-1824

IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2016-1823...

CVE-2016-1802

CVE-2016-1802 affects Apple platforms via a CommonCrypto (CCCrypt) issue: return-value handling during key-length calculations allows a crafted app to obtain sensitive information. Public sources in the Apple security content show the vulnerability and assign CVE-2016-1802 to the CommonCrypto ent...

CVE-2016-1832

CVE-2016-1832 affects Apple's libc in tvOS (Apple TV 4th generation) and related Apple platforms. Description from the TV security content indicates a memory corruption issue in libc that could allow a local attacker to cause termination or arbitrary code execution; impact is local and memory-cor...

CVE-2016-1813

CVE-2016-1813 describes a vulnerability in Apple's IOAcceleratorSharedUserClient2:page_off_resource. The issue occurs when an external method uses a NULL pointer dereference in IOAccelSharedUserClient2, allowing a local attacker to execute code in a privileged kernel context or cause a denial of ...

CVE-2016-1833

The htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted XML document...

CVE-2016-1836

Use-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to cause a denial of service via a crafted XML document...

CVE-2016-1837

Multiple use-after-free vulnerabilities in the 1 htmlPArsePubidLiteral and 2 htmlParseSystemiteral functions in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allow remote attackers to cause a denial of service via a...

CVE-2016-1847

CVE-2016-1847 affects WebKit/OpenGL on Apple TV (4th generation) with tvOS 9.2.1 and earlier. The root cause is an insufficient taint-tracking issue in parsing SVG images, enabling data disclosure when processing malicious web content. tvOS 9.2.1 includes the security update addressing this CVE.

CVE-2016-1829

CVE-2016-1829 is a kernel memory-corruption vulnerability that could allow arbitrary code execution in a privileged context or cause a denial of service when triggered by a crafted app. Affected products include Apple iOS versions before 9.3.2, OS X versions before 10.11.5, tvOS before 9.2.1, and...

CVE-2016-1833

CVE-2016-1833 is a libxml2 memory corruption issue where the htmlCurrentChar function can cause a heap-based buffer over-read during parsing of crafted XML. Public details in connected docs indicate affected platforms include Apple iOS, macOS, tvOS, watchOS and related libxml2 usage, with version...

CVE-2016-1842

CVE-2016-1842 affects MapKit in iOS <9.3.2, OS X <10.11.5, watchOS

CVE-2016-1841

libxslt, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site...

CVE-2016-1830

The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2016-1827, CVE-2016-1828,...

CVE-2016-1808

The Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2016-1832

libc in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to gain privileges or cause a denial of service memory corruption via unspecified vectors...

CVE-2016-1827

The kernel in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app, a different vulnerability than CVE-2016-1828, CVE-2016-1829,...

CVE-2016-1813

The IOAccelSharedUserClient2::pageoffresource method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service NULL pointer dereference via a crafted app...

CVE-2016-1834

CVE-2016-1834 describes a heap-based buffer overflow in libxml2's xmlStrncat function prior to 2.9.4, affecting Apple iOS/tvOS/watchOS and OS X before patched versions. Exploitation could lead to remote code execution or memory corruption and potential denial of service when processing crafted XM...

CVE-2016-1808

CVE-2016-1808 concerns a memory corruption issue in the Disk Images parsing path that could allow an attacker to execute arbitrary code in the kernel context on affected Apple platforms. Affected products/versions include iOS prior to 9.3.2, OS X prior to 10.11.5, tvOS prior to 9.2.1, and watchOS...

CVE-2016-1840

CVE-2016-1840: libxml2 contains a heap-based buffer overflow in xmlFAParsePosCharGroup (pre-2.9.4). Affected on Apple iOS (pre-9.3.2), OS X (pre-10.11.5), tvOS (pre-9.2.1), watchOS (pre-2.2.1); can lead to remote code execution or memory corruption. Remediation: upgrade libxml2 to 2.9.4 or later ...