Heap overflow

Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code via a crafted app that sends a spoofed configd response to a client...

Memory corruption

FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-5942...

Memory corruption

FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-5927...

Memory corruption

ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5937, and CVE-2015-5939...

CVE-2015-6989

Grand Central Dispatch in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted package that is mishandled during dispatch calls...

CVE-2015-5942

FontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted font file, a different vulnerability than CVE-2015-5927...

CVE-2015-7006

CVE-2015-7006 is a directory traversal vulnerability in Apple's BOM handling (CPIO archive parsing) affecting iOS <9.1, OS X <10.11.1, and watchOS

CVE-2015-5927

CVE-2015-5927 is a FontParser memory corruption vulnerability in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1. The issue arises from processing crafted font files and can lead to remote code execution or memory corruption resulting in a denial of service. Connected document...

CVE-2015-5937

CVE-2015-5937 affects Apple ImageIO in iOS < 9.1, OS X < 10.11.1, and watchOS

CVE-2015-5936

CVE-2015-5936 affects ImageIO in Apple iOS < 9.1, OS X < 10.11.1, and watchOS

CVE-2015-6974

IOHIDFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2015-5939

ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5936, and CVE-2015-5937...

CVE-2015-6996

CVE-2015-6996 affects IOAcceleratorFamily in Apple iOS < 9.1, OS X < 10.11.1, and watchOS

CVE-2015-5935

CVE-2015-5935 affects ImageIO in Apple iOS ≤9.0 (fixed in 9.1), OS X ≤10.11 (fixed in 10.11.1), and watchOS ≤2.0.0 (fixed in 2.0.1). The root cause is memory corruption caused by crafted image metadata, enabling remote code execution or a denial of service. Remediation involves upgrading to the f...

CVE-2015-7015

Heap-based buffer overflow in the DNS client library in configd in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute arbitrary code via a crafted app that sends a spoofed configd response to a client...

CVE-2015-7015

CVE-2015-7015 is a heap-based buffer overflow in the DNS client library of configd that affects Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1. An attacker could exploit a crafted configd response to execute arbitrary code on a vulnerable device. Public-connected documents co...

CVE-2015-7006

Directory traversal vulnerability in the BOM aka Bill of Materials component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code via a crafted CPIO archive...

CVE-2015-5936

ImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via crafted metadata in an image, a different vulnerability than CVE-2015-5935, CVE-2015-5937, and CVE-2015-5939...

CVE-2015-5925

CVE-2015-5925 affects Apple CoreGraphics; memory corruption in CoreGraphics can be triggered by visiting a crafted web page. It impacts iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1, with remote code execution or memory corruption as described. Apple’s advisories list this as part...

CVE-2015-6989

Grand Central Dispatch vulnerability CVE-2015-6989 affects Apple iOS prior to 9.1, OS X prior to 10.11.1, and watchOS prior to 2.0.1. The root cause is a memory corruption issue in the handling of dispatch calls, which can lead to arbitrary code execution or memory corruption when processing a cr...