CVE-2015-7079

dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

2.60% chance of exploitation in the next 30 days, 84th percentile

Published

2015-12-11

Updated

2024-08-06

Proof-of-concept exploits (2)

• dora2-iOS/daibutsu73★ · 2023-10-29
• kok3shidoll/daibutsu73★ · 2023-10-29

References

• CVE Record
• NVD entry

Related

• CVE-2016-4655
• CVE-2016-4656
• CVE-2015-7078
• CVE-2015-7083
• CVE-2015-7077
• CVE-2015-7084