CVE-2015-5874

No fix known EPSS 4%

CoreText in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.

Published 2015-09-18 · CVE record · OSV

Products: apple mac_os_x, apple itunes, apple iphone_os, apple watchos