peter bassill · operator
$ cve CVE-2016-4658 JSON

CVE-2016-4658

9.8
CRITICAL · CVSS 3.0 · EPSS 8.6% (pctl 95)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.

Scoring

CVSS9.8 (CRITICAL, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS8.56% — more likely to be exploited than 95% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploitnone known
Published2016-09-25
Last modified2026-06-17

Affected (5)

VendorProduct
appleiphone os
applemac os x
appletvos
applewatchos
xmlsoftlibxml2

References

→ the Explorer  ·  watch your stack  ·  NVD