CVE-2017-2425

CVE-2017-2425 affects macOS Sierra before 10.12.4, in the SecurityFoundation component. The issue is a double-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted certificate. Apple lists the mitigation as applying macOS 10.12.4 or Security Update 2017-001 (El ...