CVE-2016-4628 — Out-of-bounds Read in Apple Iphone OS

CWE-125 — Out-of-bounds ReadCWE-200 — Sensitive Information Exposure4 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 81.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple Iphone OSApple WatchosApple IOS
Timeline
PublishedJul 22
Latest updateMay 17

Description

IOAcceleratorFamily in Apple iOS before 9.3.3 and watchOS before 2.2.2 allows local users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) via unspecified vectors.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDapple/watchos2.2.1
▶Appleapple/watchos2.2.2
▶NVDapple/iphone_os9.3.2
▶Appleapple/ios9.3.3

🔴Vulnerability Details

1
GHSA
GHSA-rw65-rjcx-2cc2: IOAcceleratorFamily in Apple iOS before 9↗2022-05-17
▶

📋Vendor Advisories

2
Apple
CVE-2016-4628: iOS 9.3.3↗2016-07-18
▶
Apple
CVE-2016-4628: watchOS 2.2.2↗2016-07-18
▶