CVE-2015-7072
HighSummary
A vulnerability in dyld in Apple iOS before 9.2, tvOS before 9.1, and watchOS before 2.1 mishandles segment validation, allowing attackers to execute arbitrary code in a privileged context.
Risk Assessment
An attacker could exploit this vulnerability to run malicious code, potentially leading to device takeover and access to sensitive data.
Recommendation
It is recommended to update systems to the latest versions to eliminate this vulnerability and secure devices against potential attacks.
Other vulnerabilities in dyld
See all- CVE-2016-1738High
A vulnerability in dyld in Apple OS X before 10.11.4 allows attackers to bypass a code-signing protection mechanism via a modified app.
- CVE-2015-7079High
dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, allowing attackers to execute arbitrary code in a privileged context via a crafted app.
- CVE-2015-3760High
dyld in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via unspecified vectors.
Original NVD description (English source)
dyld in Apple iOS before 9.2, tvOS before 9.1, and watchOS before 2.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app.