CVE-2017-2513

Critical

Published: 22/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in certain Apple products, involving the 'SQLite' component. iOS versions before 10.3.2, macOS before 10.12.5, tvOS before 10.2.1, and watchOS before 3.2.2 are vulnerable to a use-after-free vulnerability that can lead to arbitrary code execution or application crashes.

Risk Assessment

Attackers can remotely exploit this vulnerability, posing a risk of executing malicious code or disrupting application functionality, potentially leading to data loss or service downtime.

Recommendation

It is recommended to update systems to the latest versions to mitigate this vulnerability and to monitor systems for suspicious activity.

Original NVD description (English source)

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "SQLite" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted SQL statement.