CVE-2015-7006

No fix known EPSS 4%

Directory traversal vulnerability in the BOM (aka Bill of Materials) component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote attackers to execute arbitrary code via a crafted CPIO archive.

Published 2015-10-23 · CVE record · OSV

Products: apple iphone_os, apple mac_os_x, apple watchos