CVE-2017-7115
HighSummary
An issue was discovered in certain Apple products, including iOS before 11 and tvOS before 11, related to the 'Wi-Fi' component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic that leverages a race condition.
Risk Assessment
Organizations may be exposed to remote attacks that could lead to unauthorized access to systems or disruption of their operation. In particular, attackers could exploit this vulnerability to gain control over devices.
Recommendation
It is recommended to update iOS and tvOS systems to the latest versions to mitigate this vulnerability. Additionally, monitoring Wi-Fi traffic for suspicious activities can help minimize risk.
Other vulnerabilities in Wi-Fi
See all- CVE-2017-7116High
An issue was discovered in certain Apple products, including iOS before 11, tvOS before 11, and watchOS before 4, related to the 'Wi-Fi' component. This issue might allow remote attackers to read data from kernel memory locations via crafted Wi-Fi traffic.
- CVE-2017-7112Critical
An issue was discovered in certain Apple products, including iOS before 11, tvOS before 11, and watchOS before 4, related to the 'Wi-Fi' component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic.
- CVE-2017-7110Critical
An issue was discovered in certain Apple products, including iOS, tvOS, and watchOS, related to the 'Wi-Fi' component. It may allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service through crafted Wi-Fi traffic.
- CVE-2017-7108Critical
An issue was discovered in certain Apple products related to the 'Wi-Fi' component. iOS, tvOS, and watchOS versions before 11, 11, and 4 respectively are vulnerable to attacks that may allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service via crafted Wi-Fi traffic.
- CVE-2017-7105Critical
An issue was discovered in certain Apple products, including iOS before 11, tvOS before 11, and watchOS before 4, related to the 'Wi-Fi' component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic.
- CVE-2017-7103Critical
An issue was discovered in certain Apple products related to the 'Wi-Fi' component. iOS versions before 11, tvOS before 11, and watchOS before 4 are vulnerable to attacks that may allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service via crafted Wi-Fi traffic.
- CVE-2026-20494Medium
In the Wi-Fi module, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure if a malicious actor has already obtained System privileges. User interaction is not required for exploitation.
- CVE-2026-20493Medium
In the Wi-Fi module, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local denial of service if a malicious actor has already obtained System privileges. User interaction is not required for exploitation.
Original NVD description (English source)
An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via crafted Wi-Fi traffic that leverages a race condition.