Apple iOS vulnerabilities

CVE-2017-2417 [MEDIUM] CVE-2017-2417: iOS 10.3 Apple Security Update: About the security content of iOS 10.3 Product: iOS Version: 10.3 CVE: CVE-2017-2417 Component: CoreGraphics Impact: Processing a maliciously crafted image may lead to a denial of service Description: An infinite recursion was addressed through improved state management.

CVE-2021-30776 [MEDIUM] CVE-2021-30776: A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Playing a malicious audio file may lead to an unexpected application termination.

CVE-2017-13840 [MEDIUM] CVE-2017-13840: iOS 11 Apple Security Update: About the security content of iOS 11 Product: iOS Version: 11 CVE: CVE-2017-13840 Component: Kernel Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization.

CVE-2017-13842 [MEDIUM] CVE-2017-13842: iOS 11 Apple Security Update: About the security content of iOS 11 Product: iOS Version: 11 CVE: CVE-2017-13842 Component: Kernel Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization.

CVE-2017-13822 [MEDIUM] CVE-2017-13822: iOS 11 Apple Security Update: About the security content of iOS 11 Product: iOS Version: 11 CVE: CVE-2017-13822 Component: Quick Look Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization.

CVE-2017-13841 [MEDIUM] CVE-2017-13841: iOS 11 Apple Security Update: About the security content of iOS 11 Product: iOS Version: 11 CVE: CVE-2017-13841 Component: Kernel Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization.

CVE-2017-13821 [MEDIUM] CVE-2017-13821: iOS 11 Apple Security Update: About the security content of iOS 11 Product: iOS Version: 11 CVE: CVE-2017-13821 Component: CFString Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization.

CVE-2017-13836 [MEDIUM] CVE-2017-13836: iOS 11 Apple Security Update: About the security content of iOS 11 Product: iOS Version: 11 CVE: CVE-2017-13836 Component: Kernel Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization.

CVE-2017-13818 [MEDIUM] CVE-2017-13818: iOS 11 Apple Security Update: About the security content of iOS 11 Product: iOS Version: 11 CVE: CVE-2017-13818 Component: Kernel Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization.

CVE-2018-4335 [MEDIUM] CVE-2018-4335: iOS 12 Apple Security Update: About the security content of iOS 12 Product: iOS Version: 12 CVE: CVE-2018-4335 Component: IOMobileFrameBuffer Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization.

CVE-2019-8668 [MEDIUM] CWE-20 CVE-2019-8668: A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.4, t A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. Processing a maliciously crafted image may lead to a denial of service.

CVE-2018-4381 [MEDIUM] CWE-400 CVE-2018-4381: A resource exhaustion issue was addressed with improved input validation. This issue is fixed in tvO A resource exhaustion issue was addressed with improved input validation. This issue is fixed in tvOS 12.1, iOS 12.1. Processing a maliciously crafted message may lead to a denial of service.

CVE-2016-1728 [MEDIUM] CVE-2016-1728: iOS 9.2.1 Apple Security Update: About the security content of iOS 9.2.1 Product: iOS Version: 9.2.1 CVE: CVE-2016-1728 Component: CVE-ID

CVE-2018-4440 [MEDIUM] CVE-2018-4440: iOS 12.1.1 Apple Security Update: About the security content of iOS 12.1.1 Product: iOS Version: 12.1.1 CVE: CVE-2018-4440 Component: Safari Impact: Visiting a malicious website may lead to address bar spoofing Description: A logic issue was addressed with improved state management.

CVE-2015-7058 [MEDIUM] CVE-2015-7058: iOS 9.2 Apple Security Update: About the security content of iOS 9.2 Product: iOS Version: 9.2 CVE: CVE-2015-7058 Component: CVE-2015-7058

CVE-2015-3766 [MEDIUM] CVE-2015-3766: iOS 8.4.1 Apple Security Update: About the security content of iOS 8.4.1 Product: iOS Version: 8.4.1 CVE: CVE-2015-3766 Component: CVE-ID

CVE-2015-3782 [MEDIUM] CVE-2015-3782: iOS 8.4.1 Apple Security Update: About the security content of iOS 8.4.1 Product: iOS Version: 8.4.1 CVE: CVE-2015-3782 Component: CVE-ID

CVE-2015-3721 [MEDIUM] CVE-2015-3721: iOS 8.4 Apple Security Update: About the security content of iOS 8.4 Product: iOS Version: 8.4 CVE: CVE-2015-3721 Component: CVE-ID

CVE-2016-7665 [MEDIUM] CVE-2016-7665: iOS 10.2 Apple Security Update: About the security content of iOS 10.2 Product: iOS Version: 10.2 CVE: CVE-2016-7665 Component: Graphics Driver Impact: Watching a maliciously crafted video may lead to a denial of service Description: A denial of service issue existed in the handling of video. This issue was addressed through improved input validation.

CVE-2016-1752 [MEDIUM] CVE-2016-1752: iOS 9.3 Apple Security Update: About the security content of iOS 9.3 Product: iOS Version: 9.3 CVE: CVE-2016-1752 Component: CVE-ID