CVE-2015-5746

Apple iOS before 8.4.1 is affected by CVE-2015-5746 via AppleFileConduit, where the afc command’s symlink handling bypasses intended filesystem access restrictions. The root cause is mishandling of symbolic links in the afc mechanism, enabling access to protected parts of the file system. Exposur...