CVE-2015-5900

Apple OS X < 10.10.5 - Denial of Service via EFI Protected Range Register

Title source: llm
STIX 2.1

Description

The protected range register in the EFI component in Apple OS X before 10.11 has an incorrect value, which allows attackers to cause a denial of service (boot failure) via a crafted app that writes to an unintended address.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1033703
Vendor Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT205267

Scores

EPSS 0.0156
EPSS Percentile 72.7%

Details

CWE
CWE-254
Status published
Products (1)
apple/mac_os_x < 10.10.5
Published Oct 09, 2015
Tracked Since Feb 18, 2026