CVE-2017-7005

HIGH

Apple <10.3.2, <10.1.1, <10.2.1 - RCE

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2017-7005. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit leverages a type confusion vulnerability in JavaScriptCore (CVE-2017-7005) by triggering `haveABadTime` to force arrays into `ArrayWithSlowPutArrayStorage`, then using `fastSlice` or `concat` operations across different JSGlobalObject contexts to achieve type confusion.

Description

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "JavaScriptCore" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Google Security Research · htmldosmultiple
https://www.exploit-db.com/exploits/42188

This exploit leverages a type confusion vulnerability in JavaScriptCore (CVE-2017-7005) by triggering `haveABadTime` to force arrays into `ArrayWithSlowPutArrayStorage`, then using `fastSlice` or `concat` operations across different JSGlobalObject contexts to achieve type confusion.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: WebKit JavaScriptCore (Safari, other WebKit-based browsers)
No auth needed
Prerequisites: Victim must visit a malicious webpage · WebKit-based browser with vulnerable JavaScriptCore
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/42188/
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT207804
Exploit, Third Party Advisory x_refsource_misc
https://github.com/Quindecim/Orbis-Exploit-5.x
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT207798
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT207801

Scores

CVSS v3 8.8
EPSS 0.0322
EPSS Percentile 87.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (3)
apple/iphone_os < 10.3.2
apple/safari < 10.1.1
apple/tvos < 10.2.1
Published Apr 03, 2018
Tracked Since Feb 18, 2026