CVE-2016-4620

CVE-2016-4620 affects Apple iOS prior to 10, in the Sandbox Profiles component. The issue is an access control flaw in SMS draft directories that allowed a crafted app to discover text-message recipients by stat-ing these directories. Apple’s remediation tightened directory access so apps cannot ...