CVE-2016-4718

—

CVSS 3.0

6.5 medium

EPSS

3%p84

Published

Sep 25, 2016 (Sep 25, 2016)

Modified

Jun 17, 2026

Description

Buffer overflow in FontParser in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows remote attackers to obtain sensitive information from process memory via a crafted font file.

Vendors: apple
Products: iphone os, mac os x, tvos, watchos
Weakness: CWE-119
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news0 stories

No ingested article mentions this CVE yet.