CVE-2017-2524

Critical

Published: 22/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in the 'TextInput' component in certain Apple products, affecting iOS before 10.3.2, macOS before 10.12.5, tvOS before 10.2.1, and watchOS before 3.2.2. It allows remote attackers to execute arbitrary code or cause a denial of service via crafted data.

Risk Assessment

Organizations may be exposed to remote attacks that could lead to unauthorized access to systems or application crashes, resulting in data loss and downtime.

Recommendation

It is recommended to update all affected Apple products to the latest versions to mitigate this vulnerability.

Original NVD description (English source)

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "TextInput" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted data.