CVE-2015-7079
HighSummary
dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, allowing attackers to execute arbitrary code in a privileged context via a crafted app.
Risk Assessment
This vulnerability could lead to unauthorized control over the device by malicious applications, posing a serious threat to user data security.
Recommendation
It is recommended to update iOS and tvOS to the latest versions to mitigate the risks associated with this vulnerability.
Other vulnerabilities in dyld
See all- CVE-2016-1738High
A vulnerability in dyld in Apple OS X before 10.11.4 allows attackers to bypass a code-signing protection mechanism via a modified app.
- CVE-2015-7072High
A vulnerability in dyld in Apple iOS before 9.2, tvOS before 9.1, and watchOS before 2.1 mishandles segment validation, allowing attackers to execute arbitrary code in a privileged context.
- CVE-2015-3760High
dyld in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via unspecified vectors.
Original NVD description (English source)
dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app.