The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a…

Exploit prediction (EPSS)

1.10% probability of exploitation in the next 30 days, higher than 66% of all scored CVEs.

Exploits and detections

• EDB-39364 iOS Kernel - IOReportHub Use-After-Free · dos · 2016-01-28
• EDB-39363 iOS Kernel - IOHIDEventService Use-After-Free · dos · 2016-01-28
• EDB-39362 iOS Kernel - AppleOscarCMA Use-After-Free · dos · 2016-01-28
• EDB-39361 iOS Kernel - AppleOscarCompass Use-After-Free · dos · 2016-01-28
• EDB-39360 iOS Kernel - AppleOscarAccelerometer Use-After-Free · dos · 2016-01-28
• EDB-39359 iOS Kernel - AppleOscarGyro Use-After-Free · dos · 2016-01-28

CVSS scores

Classification

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

• exploit-db.com /exploits/39362/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
• packetstormsecurity.com /files/135442/iOS-Kernel-AppleOscarAccelerometer-Use-After-Free.html · x_refsource_MISC, x_transferred
• exploit-db.com /exploits/39360/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
• code.google.com /p/google-security-research/issues/detail?id=604 · x_refsource_MISC, x_transferred
• support.apple.com /HT206168 · x_refsource_CONFIRM, x_transferred
• support.apple.com /HT205731 · x_refsource_CONFIRM, x_transferred
• support.apple.com /HT205729 · x_refsource_CONFIRM, x_transferred
• packetstormsecurity.com /files/135441/iOS-Kernel-AppleOscarCompass-Use-After-Free.html · x_refsource_MISC, x_transferred
• packetstormsecurity.com /files/135439/iOS-Kernel-IOHIDEventService-Use-After-Free.html · x_refsource_MISC, x_transferred
• lists.apple.com /archives/security-announce/2016/Jan/msg00005.html · vendor-advisory, x_refsource_APPLE, x_transferred
• securitytracker.com /id/1034736 · vdb-entry, x_refsource_SECTRACK, x_transferred
• lists.apple.com /archives/security-announce/2016/Jan/msg00003.html · vendor-advisory, x_refsource_APPLE, x_transferred
• code.google.com /p/google-security-research/issues/detail?id=607 · x_refsource_MISC, x_transferred
• lists.apple.com /archives/security-announce/2016/Mar/msg00001.html · vendor-advisory, x_refsource_APPLE, x_transferred
• packetstormsecurity.com /files/135438/iOS-Kernel-IOReportHub-Use-After-Free.html · x_refsource_MISC, x_transferred
• lists.apple.com /archives/security-announce/2016/Jan/msg00002.html · vendor-advisory, x_refsource_APPLE, x_transferred
• exploit-db.com /exploits/39363/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
• packetstormsecurity.com /files/135440/iOS-Kernel-AppleOscarCMA-Use-After-Free.html · x_refsource_MISC, x_transferred
• code.google.com /p/google-security-research/issues/detail?id=605 · x_refsource_MISC, x_transferred
• code.google.com /p/google-security-research/issues/detail?id=603 · x_refsource_MISC, x_transferred
• packetstormsecurity.com /files/135443/iOS-Kernel-AppleOscarGyro-Use-After-Free.html · x_refsource_MISC, x_transferred
• exploit-db.com /exploits/39359/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
• exploit-db.com /exploits/39361/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
• support.apple.com /HT205732 · x_refsource_CONFIRM, x_transferred
• exploit-db.com /exploits/39364/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
• code.google.com /p/google-security-research/issues/detail?id=606 · x_refsource_MISC, x_transferred
• code.google.com /p/google-security-research/issues/detail?id=608 · x_refsource_MISC, x_transferred

Sources

• CVE List: CVE-2016-1719
• NVD: CVE-2016-1719

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.