A use-after-free issue was addressed with improved memory management. This issue is fixed in HomeView Software Version 27.2, iOS 18.7.12 and iPadOS 18.7.12, iOS 26.7.3 and iPadOS 26.7.3, iOS 27.2.1 and iPadOS 27.2.1, macOS Golden Gate 27.2.1, macOS Sequoia 15…
7.8Alta
KEV
CVE-2016-4656Apple iOS Memory Corruption Vulnerability
Explotación conocida — Apple iOS Memory Corruption Vulnerability
CISA confirmó el 24.05.2022 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 14.06.2022.
Acción requerida: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2016-4656
Descripción
The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
Debilidad (CWE):
CWE-787
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
Referencias y parches
- https://blog.lookout.com/blog/2016/08/25/trident-pegasus/ Broken Link
- 44836 exploitExploitThird Party AdvisoryVDB Entry
- https://support.apple.com/HT207107 Release NotesVendor Advisory
- APPLE-SA-2016-08-25-1 vendor-advisoryBroken LinkMailing ListVendor Advisory
- 92652 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- 1036694 vdb-entryBroken LinkThird Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-4656 US Government Resource
Coincidencias CPE (NVD) (1)
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*< 9.3.5