CVE-2015-7079

dyld in Apple iOS before 9.2 and tvOS before 9.1 mishandles segment validation, which allows attackers to execute arbitrary code in a privileged context via a crafted app.

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

2.60% chance of exploitation in the next 30 days, 85th percentile

Published

2015-12-11

Updated

2024-08-06

Proof-of-concept exploits (2)

• dora2-iOS/daibutsu73★ · 2023-10-29
• kok3shidoll/daibutsu73★ · 2023-10-29

Security advisories

• http://lists.apple.com/archives/security-announce/2015/Dec/msg00000.html
• http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.html
• https://support.apple.com/HT205635
• https://support.apple.com/HT205640

References

• CVE Record
• NVD entry

Related

• CVE-2016-4655
• CVE-2016-4656