CVE-2015-6983
HighSummary
A double free vulnerability in Apple iOS before 9.1 and OS X before 10.11.1 allows attackers to write to arbitrary files via a crafted app that accesses AtomicBufferedFile descriptors.
Risk Assessment
Attackers can exploit this vulnerability to gain unauthorized access to files, potentially leading to data loss or privacy breaches.
Recommendation
It is recommended to update iOS to version 9.1 and OS X to version 10.11.1 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Apple iOS, OS X
See all- CVE-2015-3806High
Apple iOS versions before 8.4.1 and OS X versions before 10.10.5 allow local users to bypass a code-signing protection mechanism by appending code to a crafted executable file.
- CVE-2015-3805High
In Apple iOS before 8.4.1 and OS X before 10.10.5, local users can bypass a code-signing protection mechanism via a crafted Mach-O file.
- CVE-2015-3803High
Apple iOS versions before 8.4.1 and OS X versions before 10.10.5 allow local users to bypass a code-signing protection mechanism via a crafted multi-architecture executable file.
- CVE-2015-3802High
In Apple iOS before 8.4.1 and OS X before 10.10.5, local users can bypass a code-signing protection mechanism via a crafted Mach-O file.
Original NVD description (English source)
Double free vulnerability in Apple iOS before 9.1 and OS X before 10.11.1 allows attackers to write to arbitrary files via a crafted app that accesses AtomicBufferedFile descriptors.