Back to search
CVE-2016-1802
Published: May 20, 2016
Modified: Aug 5, 2024
PUBLISHED
Description
CCCrypt in CommonCrypto in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 mishandles return values during key-length calculations, which allows attackers to obtain sensitive information via a crafted app.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://support.apple.com/HT206567
x_refsource_CONFIRM
APPLE-SA-2016-05-16-4
vendor-advisory
x_refsource_APPLE
https://support.apple.com/HT206566
x_refsource_CONFIRM
90694
vdb-entry
x_refsource_BID
APPLE-SA-2016-05-16-3
vendor-advisory
x_refsource_APPLE
https://support.apple.com/HT206564
x_refsource_CONFIRM
1035890
vdb-entry
x_refsource_SECTRACK
APPLE-SA-2016-05-16-2
vendor-advisory
x_refsource_APPLE
https://support.apple.com/HT206568
x_refsource_CONFIRM
APPLE-SA-2016-05-16-1
vendor-advisory
x_refsource_APPLE
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now