A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15.8.3, macOS Tahoe 26.7.3, vision…
7.8Hoch
KEV
CVE-2016-4656Apple iOS Memory Corruption Vulnerability
Bekannt ausgenutzt — Apple iOS Memory Corruption Vulnerability
CISA hat am 24.05.2022 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 14.06.2022.
Erforderliche Maßnahme: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2016-4656
Beschreibung
The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Schwachstellentyp (CWE):
CWE-787
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://blog.lookout.com/blog/2016/08/25/trident-pegasus/ Broken Link
- 44836 exploitExploitThird Party AdvisoryVDB Entry
- https://support.apple.com/HT207107 Release NotesVendor Advisory
- APPLE-SA-2016-08-25-1 vendor-advisoryBroken LinkMailing ListVendor Advisory
- 92652 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- 1036694 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4656 US Government Resource
CPE-Treffer (NVD) (1)
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*< 9.3.5