Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-4752

No fix known EPSS <1%

The SecKeyDeriveFromPassword function in Apple OS X before 10.12 does not use the CF_RETURNS_RETAINED keyword, which allows attackers to obtain sensitive information from process memory by triggering key derivation.

Published 2016-09-25 · CVE record · OSV

Products: apple mac_os_x