NetSight
IP …
high7.8Public exploit code

CVE-2016-1813

The IOAccelSharedUserClient2::page_off_resource method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attac…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The IOAccelSharedUserClient2::page_off_resource method in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.

Affected products

VendorProductAffected versions
AppleWatchos
before 2.2.1
AppleIphone Os
before 9.3.2
AppleMac Os X
before 10.11.5
AppleTvos
before 9.2.1

Weakness classification

CWE-476

References