CVE-2016-7608

An issue was discovered in certain Apple products. macOS before 10.12.2 is affected. The issue involves the "IOFireWireFamily" component, which allows local users to obtain sensitive information from kernel memory via unspecified vectors.

CVSS v3.0 NVD

5.5 MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0 NVD

2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

1.10% chance of exploitation in the next 30 days, 65th percentile

Published

2017-02-20

Updated

2024-08-06

Proof-of-concept exploits (1)

• bazad/IOFireWireFamily-overflow2★ · 2017-08-19

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/44235

Security advisories

• https://support.apple.com/HT207423
• http://www.securityfocus.com/bid/94903

References

• CVE Record
• NVD entry

Related

• CVE-2016-1825
• CVE-2016-1827
• CVE-2016-7617
• CVE-2016-7637
• CVE-2017-13868
• CVE-2017-2388