CVE-2015-7116 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Iphone OS

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer8 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.8%
top 25.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Apple Iphone OSApple MAC OS XApple Tvos+2 more
Timeline
PublishedJan 10
Latest updateMay 14

Description

libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a denial of service (memory corruption) via a crafted XML document, a different vulnerability than CVE-2015-7115.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages6 packages

▶NVDapple/tvos9.0
▶Appleapple/tvos9.1
▶NVDapple/mac_os_x10.11.0

🔴Vulnerability Details

2
GHSA
GHSA-44xc-fr4f-4f38: libxml2 in Apple iOS before 9↗2022-05-14
▶
GHSA
GHSA-3hw4-hh3h-jx7q: libxml2 in Apple iOS before 9↗2022-05-14
▶

📋Vendor Advisories

3
Apple
CVE-2015-7116: OS X El Capitan 10.11.2, Security Update 2015-005 Yosemite, and Security Update 2015-008 Mavericks↗
▶
Apple
CVE-2015-7116: iOS 9.2↗
▶
Apple
CVE-2015-7116: tvOS 9.1↗
▶

💬Community

1
HackerOne
Multiple issues in Libxml2 (2.9.2 - 2.9.5)↗2019-10-14
▶