CVE-2015-3732 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Iphone OS

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer6 documents4 sources
Severity
6.8MEDIUMNVD
EPSS
1.6%
top 18.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Apple Iphone OSApple SafariApple TV+2 more
Timeline
PublishedAug 16
Latest updateMay 14

Description

WebKit, as used in Apple iOS before 8.4.1 and Safari before 6.2.8, 7.x before 7.1.8, and 8.x before 8.0.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2015-08-13-1 and APPLE-SA-2015-08-13-3.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages5 packages

▶NVDapple/safari6.0 — 6.2.8+2
▶NVDapple/iphone_os< 8.4.1
▶Appleapple/ios8.4.1
▶Appleapple/apple_tv7.2.1

🔴Vulnerability Details

2
GHSA
GHSA-v52p-fjx8-fvmh: WebKit, as used in Apple iOS before 8↗2022-05-14
▶
OSV
CVE-2015-3732: WebKit, as used in Apple iOS before 8↗2015-08-16
▶

📋Vendor Advisories

3
Apple
CVE-2015-3732: iOS 8.4.1↗
▶
Apple
CVE-2015-3732: Safari 8.0.8, Safari 7.1.8, and Safari 6.2.8↗
▶
Apple
CVE-2015-3732: Apple TV 7.2.1↗
▶
CVE-2015-3732 — Apple Iphone OS vulnerability | cvebase