CVE-2015-3798
HighSummary
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression.
Risk Assessment
Organizations may be exposed to arbitrary code execution or application crashes, potentially leading to data loss or service interruptions.
Recommendation
It is recommended to update systems to the latest versions to mitigate this vulnerability and to monitor applications for unusual behavior.
Other vulnerabilities in TRE library in Libc
See all- CVE-2015-3797High
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression.
- CVE-2015-3796High
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression.
Original NVD description (English source)
The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted regular expression, a different vulnerability than CVE-2015-3796 and CVE-2015-3797.