CVE-2017-2534

High

Published: 22/05/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An issue was discovered in certain Apple products, including macOS before 10.12.5, related to the 'Speech Framework' component. It allows attackers to conduct sandbox-escape attacks via a crafted app.

Risk Assessment

Attackers may exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update macOS to version 10.12.5 or later to mitigate the risk associated with this vulnerability.

Other vulnerabilities in Speech Framework

CVE-2017-6977High
An issue was discovered in certain Apple products, including macOS before 10.12.5, involving the 'Speech Framework' component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service via a crafted app.

Original NVD description (English source)

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Speech Framework" component. It allows attackers to conduct sandbox-escape attacks via a crafted app.