CVE-2016-7594

High

Published: 20/02/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An issue was discovered in certain Apple products, including iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3, related to the 'ICU' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website.

Risk Assessment

Organizations may be exposed to remote attacks that could lead to unauthorized access to systems or application crashes, resulting in data loss and downtime.

Recommendation

It is recommended to update all affected Apple products to the latest versions to minimize the risk associated with this vulnerability.

Other vulnerabilities in ICU

CVE-2025-5222High
A stack buffer overflow was found in the International Components for Unicode (ICU) library when running the genrb binary. The vulnerability occurs in the SRBRoot::addTag function, where the 'subtag' struct overflows, potentially leading to memory corruption and local arbitrary code execution.

Original NVD description (English source)

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "ICU" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.