CVE-2017-7112
CriticalSummary
An issue was discovered in certain Apple products, including iOS before 11, tvOS before 11, and watchOS before 4, related to the 'Wi-Fi' component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic.
Risk Assessment
This vulnerability poses a risk to organizations by allowing remote attackers to gain control over the system or disrupt its operation. This could lead to serious consequences, including data loss and service availability issues.
Recommendation
It is recommended to update systems to the latest versions to mitigate this vulnerability. Additionally, monitoring Wi-Fi traffic for potential attacks is advised.
Other vulnerabilities in Wi-Fi
See all- CVE-2017-7116High
An issue was discovered in certain Apple products, including iOS before 11, tvOS before 11, and watchOS before 4, related to the 'Wi-Fi' component. This issue might allow remote attackers to read data from kernel memory locations via crafted Wi-Fi traffic.
- CVE-2017-7115High
An issue was discovered in certain Apple products, including iOS before 11 and tvOS before 11, related to the 'Wi-Fi' component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic that leverages a race condition.
- CVE-2017-7110Critical
An issue was discovered in certain Apple products, including iOS, tvOS, and watchOS, related to the 'Wi-Fi' component. It may allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service through crafted Wi-Fi traffic.
- CVE-2017-7108Critical
An issue was discovered in certain Apple products related to the 'Wi-Fi' component. iOS, tvOS, and watchOS versions before 11, 11, and 4 respectively are vulnerable to attacks that may allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service via crafted Wi-Fi traffic.
- CVE-2017-7105Critical
An issue was discovered in certain Apple products, including iOS before 11, tvOS before 11, and watchOS before 4, related to the 'Wi-Fi' component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic.
- CVE-2017-7103Critical
An issue was discovered in certain Apple products related to the 'Wi-Fi' component. iOS versions before 11, tvOS before 11, and watchOS before 4 are vulnerable to attacks that may allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service via crafted Wi-Fi traffic.
- CVE-2026-20494Medium
In the Wi-Fi module, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained System privileges. User interaction is not required for exploitation.
- CVE-2026-20493Medium
In the Wi-Fi module, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained System privileges. User interaction is not required for exploitation.
Original NVD description (English source)
An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic.