CVE-2016-7663

Critical

Published: 20/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in certain Apple products, including iOS before 10.2, macOS before 10.12.2, and watchOS before 3.1.3, related to the 'CoreFoundation' component. It allows remote attackers to execute arbitrary code or cause a denial of service via a crafted string.

Risk Assessment

This vulnerability could lead to serious consequences, such as remote code execution or application crashes, posing a threat to the integrity and availability of systems.

Recommendation

It is recommended to update systems to the latest versions to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "CoreFoundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted string.