CVE-2015-8659

Fixed in a distro release EPSS 4%

The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug.

Published 2016-01-12 · CVE record · OSV

Products: apple mac_os_x, nghttp2, apple iphone_os, apple tvos, apple watchos

Distro releases