CVE-2015-7109

CriticalCVSS 9.3/10Last modified Jun 17, 2026

Description

IOAcceleratorFamily in Apple OS X before 10.11.2 and tvOS before 9.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.htmlVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.htmlVendor Advisory
http://www.securitytracker.com/id/1034344
https://support.apple.com/HT205637Vendor Advisory
https://support.apple.com/HT205640Vendor Advisory
http://lists.apple.com/archives/security-announce/2015/Dec/msg00001.htmlVendor Advisory
http://lists.apple.com/archives/security-announce/2015/Dec/msg00005.htmlVendor Advisory
http://www.securitytracker.com/id/1034344
https://support.apple.com/HT205637Vendor Advisory
https://support.apple.com/HT205640Vendor Advisory

Timeline

Published: Dec 11, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-71106.9The Disk Images component in Apple OS X before 10.11.2 and tvOS before 9.1 allows local users to gain privileges or cause a denial of servic CVE-2015-71119.3The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitr CVE-2015-71129.3The IOHIDFamily API in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to execute arbitr CVE-2015-711310.0The LaunchServices component in Apple iOS before 9.2 and watchOS before 2.1 allows attackers to execute arbitrary code in a privileged conte CVE-2015-71154.3libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a CVE-2015-71164.3libxml2 in Apple iOS before 9.2, OS X before 10.11.2, and tvOS before 9.1 allows remote attackers to obtain sensitive information or cause a CVE-2015-71176.6Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati CVE-2015-71747.5The nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cau CVE-2015-71757.5The XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cau CVE-2015-71767.5The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf functi CVE-2015-71777.5The InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of CVE-2015-71787.5The ProgramBinary::linkAttributes function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on W