CVE-2017-7009

High

Published: 20/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An issue was discovered in certain Apple products related to the 'IOUSBFamily' component. It affects iOS versions before 10.3.3, macOS versions before 10.12.6, tvOS versions before 10.2.2, and watchOS versions before 3.2.3, allowing attackers to execute arbitrary code in a privileged context or cause a denial of service via a crafted app.

Risk Assessment

Organizations using affected systems are at risk of unauthorized code execution and potential service disruptions, which could lead to data loss or availability issues.

Recommendation

It is recommended to update all affected systems to the latest versions to mitigate the risks associated with this vulnerability.

Other vulnerabilities in IOUSBFamily

CVE-2016-1749High
IOUSBFamily in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Original NVD description (English source)

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "IOUSBFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.