Description
An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to cause a denial of service via a crafted string.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT207422
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT207423
Scores
CVSS v3
7.5
EPSS
0.0118
EPSS Percentile
64.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-20
Status
published
Products (2)
apple/iphone_os
< 10.1.1
apple/mac_os_x
< 10.12.1
Published
Feb 20, 2017
Tracked Since
Feb 18, 2026