CVE-2016-1775
No fix known EPSS 4%
TrueTypeScaler in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font file.
Products: apple iphone_os, apple mac_os_x, apple tvos, apple watchos