CVE-2017-2522

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "CoreFoundation" component. It allows remote attackers to execute arbitrary code or cause a...

CVE-2017-6994

CVE-2017-6994 affects AVEVideoEncoder in Apple’s iOS, tvOS, and watchOS prior to the patched releases (iOS 10.3.2, tvOS 10.2.1, watchOS 3.2.2). The issue is described as an information‑disclosure/memory‑corruption flaw in the AVEVideoEncoder component that can leak kernel addresses and elevate pr...

CVE-2017-2502

CVE-2017-2502 is an Apple CoreAudio information-disclosure issue that lets a crafted app bypass memory-read restrictions and read restricted memory. It affects iOS before 10.3.2, macOS before 10.12.5, tvOS before 10.2.1, and watchOS before 3.2.2. The root cause is a CoreAudio validation flaw that...

CVE-2017-2523

CVE-2017-2523 is a memory-corruption vulnerability in Apple’s Foundation framework that affects multiple platforms. Affected software versions: iOS prior to 10.3.2, macOS prior to 10.12.5, tvOS prior to 10.2.1, and watchOS prior to 3.2.2. The issue allows remote attackers to execute arbitrary cod...

CVE-2017-2524

CVE-2017-2524 affects Apple platforms due to a TextInput heap/memory corruption path exposed during NSKeyedArchiver deserialization in TIKeyboardLayout (TextInput). Apple docs and security updates (tvOS 10.2.1, iOS 10.3.2, macOS 10.12.5, watchOS 3.2.2) describe memory corruption that can lead to ...

CVE-2017-6997

CVE-2017-6997 affects Apple devices via the AVEVideoEncoder kernel.extension. According to Apple’s security updates for iOS 10.3.2, tvOS 10.2.1, and watchOS 3.2.2, multiple memory corruption issues in AVEVideoEncoder could allow an attacker with local code execution to gain kernel privileges or c...

CVE-2017-2502

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "CoreAudio" component. It allows attackers to bypass intended memory-read restrictions via a...

CVE-2017-6989

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of servic...

CVE-2017-6987

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a...

CVE-2017-6994

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of servic...

CVE-2017-2501

Apple CVE-2017-2501 describes a kernel race condition across iOS, macOS, tvOS, and watchOS that could allow a crafted app to execute arbitrary code with kernel privileges. Affected products include iOS 10.3.x (before 10.3.2), macOS 10.12.x (before 10.12.5), tvOS 10.2.x (before 10.2.1), and watchO...

CVE-2017-6996

CVE-2017-6996 is part of Apple’s AVEVideoEncoder kernel-extension family affecting iOS (before 10.3.2), tvOS (before 10.2.1), and watchOS (before 3.2.2). The issue enables an crafted app to execute arbitrary code with kernel privileges or cause memory corruption leading to denial of service via A...

CVE-2017-2522

CVE-2017-2522 concerns memory corruption in Apple’s CoreFoundation. The initial description confirms that iOS before 10.3.2, macOS before 10.12.5, tvOS before 10.2.1, and watchOS before 3.2.2 are affected by a vulnerability in CoreFoundation that allows remote attackers to execute arbitrary code ...

CVE-2017-6979: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "IOSurface" component. A race condition allows attackers to execute arbitrary code in a...

CVE-2017-2501: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Kernel" component. A race condition allows attackers to execute arbitrary code in a...

CVE-2017-6989: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of servic...

CVE-2017-2521: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial o...

CVE-2017-2502: Undefined Security Weakness

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "CoreAudio" component. It allows attackers to bypass intended memory-read restrictions via a...

CVE-2017-2507: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a...

CVE-2017-6995: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of servic...