ByteOS

Product:iOS, iPadOS, and macOS

Added At:21 Aug, 2025

Due At:11 Sep, 2025

Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Apple iOS, iPadOS, and macOS contain an out-of-bounds write vulnerability in the Image I/O framework.

Used in Ransomware

Unknown

CWE

CWE-787

Required Action:

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Additional Notes:

https://support.apple.com/en-us/124925 ; https://support.apple.com/en-us/124926 ; https://support.apple.com/en-us/124927 ; https://support.apple.com/en-us/124928 ; https://support.apple.com/en-us/124929 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43300

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:apple

Assigner Org ID:286789f9-fbc2-4510-9f9a-43facdede74c

Published At:21 Aug, 2025 | 00:27

Updated At:27 Nov, 2025 | 04:56

▼CVE Numbering Authority (CNA)

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

Affected Products

Vendor

Product

iOS and iPadOS

Versions

Affected

From unspecified before 15.8 (custom)

Vendor

Product

iOS and iPadOS

Versions

Affected

From unspecified before 16.7 (custom)

Problem Types

Type	CWE ID	Description
N/A	N/A	Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

Type: N/A

CWE ID: N/A

Description: Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.

References

Hyperlink	Resource
https://support.apple.com/en-us/125142	N/A
https://support.apple.com/en-us/125141	N/A

Hyperlink: https://support.apple.com/en-us/125142

Resource: N/A

Hyperlink: https://support.apple.com/en-us/125141

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-787	CWE-787 Out-of-bounds Write

Type: CWE

CWE ID: CWE-787

Description: CWE-787 Out-of-bounds Write

Metrics

Version	Base score	Base severity	Vector
3.1	10.0	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Version: 3.1

Base score: 10.0

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Metrics Other Info

kev

dateAdded:

2025-08-21

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43300

References

Hyperlink	Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43300	government-resource
https://github.com/cisagov/vulnrichment/issues/201	issue-tracking

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43300

Resource:

government-resource

Hyperlink: https://github.com/cisagov/vulnrichment/issues/201

Resource:

issue-tracking

2. CVE Program Container

References

Hyperlink	Resource
https://github.com/b1n4r1b01/n-days/blob/main/CVE-2025-43300.md	N/A
http://seclists.org/fulldisclosure/2025/Sep/52	N/A
http://seclists.org/fulldisclosure/2025/Sep/14	N/A
http://seclists.org/fulldisclosure/2025/Sep/10	N/A

Hyperlink: https://github.com/b1n4r1b01/n-days/blob/main/CVE-2025-43300.md

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Sep/52

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Sep/14

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2025/Sep/10

Resource: N/A

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:21 Aug, 2025 | 01:15

Updated At:26 Nov, 2025 | 16:21

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2025-08-21	2025-09-11	Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability	Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Date Added: 2025-08-21

Due Date: 2025-09-11

Vulnerability Name: Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	10.0	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 10.0

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CPE Matches

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

>>ipados>>Versions before 15.8.5(exclusive)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

>>ipados>>Versions from 16.0(inclusive) to 16.7.12(exclusive)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

>>ipados>>Versions from 18.0(inclusive) to 18.6.2(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>iphone_os>>Versions before 15.8.5(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>iphone_os>>Versions from 16.0(inclusive) to 16.7.12(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

>>iphone_os>>Versions from 18.0(inclusive) to 18.6.2(exclusive)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

>>macos>>Versions before 13.7.8(exclusive)

Weaknesses

CWE ID	Type	Source
CWE-787	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-787

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://support.apple.com/en-us/125141	product-security@apple.com	Release Notes Vendor Advisory
https://support.apple.com/en-us/125142	product-security@apple.com	Release Notes Vendor Advisory
http://seclists.org/fulldisclosure/2025/Sep/10	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2025/Sep/14	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2025/Sep/52	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
https://github.com/b1n4r1b01/n-days/blob/main/CVE-2025-43300.md	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory
https://github.com/cisagov/vulnrichment/issues/201	134c704f-9b21-4f2e-91b3-4a467353bcc0	Issue Tracking
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43300	134c704f-9b21-4f2e-91b3-4a467353bcc0	US Government Resource

Hyperlink: https://support.apple.com/en-us/125141

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: https://support.apple.com/en-us/125142

Source: product-security@apple.com

Resource:

Release Notes

Vendor Advisory

Hyperlink: http://seclists.org/fulldisclosure/2025/Sep/10

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://seclists.org/fulldisclosure/2025/Sep/14

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://seclists.org/fulldisclosure/2025/Sep/52

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Mailing List

Third Party Advisory

Hyperlink: https://github.com/b1n4r1b01/n-days/blob/main/CVE-2025-43300.md

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Exploit

Third Party Advisory

Hyperlink: https://github.com/cisagov/vulnrichment/issues/201

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Resource:

Issue Tracking

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-43300

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Resource:

US Government Resource

Similar CVEs

1406Records found

CVE-2021-1772

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.68% / 71.28%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:56

Updated-03 Aug, 2024 | 16:25

A stack overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted text file may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1828

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.1||HIGH

EPSS-0.18% / 39.72%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:56

Updated-03 Aug, 2024 | 16:25

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. An application may be able to cause unexpected system termination or write kernel memory.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1840

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.07% / 21.19%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:43

Updated-03 Aug, 2024 | 16:25

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A local attacker may be able to elevate their privileges.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-1020

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-4.12% / 88.40%

7 Day CHG~0.00%

Published-09 Apr, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1012, CVE-2016-1021, CVE-2016-1022, CVE-2016-1023, CVE-2016-1024, CVE-2016-1025, CVE-2016-1026, CVE-2016-1027, CVE-2016-1028, CVE-2016-1029, CVE-2016-1032, and CVE-2016-1033.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel iphone_os flash_player_desktop_runtime air_desktop_runtime air_sdk air_sdk_\&_compiler windows windows_8.1 mac_os_x android windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1767

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.23% / 45.27%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:54

Updated-03 Aug, 2024 | 16:25

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to heap corruption.

Vendor-Apple Inc.

Product-iphone_os macos mac_os_x ipados macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1796

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.56% / 81.18%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 18:03

Updated-03 Aug, 2024 | 16:25

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os ipad_os iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1817

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.97% / 76.28%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:56

Updated-03 Aug, 2024 | 16:25

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos tvos ipados macos tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1808

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.5||HIGH

EPSS-0.54% / 67.25%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:54

Updated-03 Aug, 2024 | 16:25

A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to read restricted memory.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1883

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.99% / 76.57%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:49

Updated-03 Aug, 2024 | 16:25

This issue was addressed with improved checks. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted server messages may lead to heap corruption.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2022-32792

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.32% / 54.68%

7 Day CHG~0.00%

Published-23 Sep, 2022 | 18:59

Updated-22 May, 2025 | 20:15

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-tvos macos iphone_os ipados watchos watchOS tvOS macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-13494

Matching Score-6

Assigner-Talos

Matching Score-6

Assigner-Talos

CVSS Score-4.3||MEDIUM

EPSS-0.22% / 44.88%

7 Day CHG~0.00%

Published-02 Dec, 2020 | 17:28

Updated-04 Aug, 2024 | 12:18

A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary USD files. A specially crafted malformed file can trigger a heap overflow which can result in out of bounds memory access which could lead to information disclosure. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, victim needs to access an attacker-provided malformed file.

Vendor-pixar n/a Apple Inc.

Product-macos openusd Pixar

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1834

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-1.44% / 80.44%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:43

Updated-03 Aug, 2024 | 16:25

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1809

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.5||HIGH

EPSS-0.54% / 67.25%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:56

Updated-03 Aug, 2024 | 16:25

A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to read restricted memory.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1737

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.27% / 49.84%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:45

Updated-03 Aug, 2024 | 16:18

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os macos mac_os_x ipados macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1762

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.27% / 50.64%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:57

Updated-03 Aug, 2024 | 16:18

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os macos mac_os_x ipados macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1858

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.48% / 64.73%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:45

Updated-03 Aug, 2024 | 16:25

Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An out-of-bounds write issue was addressed with improved bounds checking.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1744

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.69% / 71.51%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:49

Updated-03 Aug, 2024 | 16:18

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1738

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.27% / 49.84%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:47

Updated-03 Aug, 2024 | 16:18

Vendor-Apple Inc.

Product-iphone_os macos mac_os_x ipados macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-2883

Matching Score-6

Matching Score-6

CVSS Score-7.3||HIGH

EPSS-93.19% / 99.79%

7 Day CHG+1.01%

Published-09 Sep, 2010 | 21:00

Updated-22 Oct, 2025 | 01:15

Known KEV||Action Due Date - 2022-06-22||Apply updates per vendor instructions.

Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PDF document with a long field in a Smart INdependent Glyphlets (SING) table in a TTF font, as exploited in the wild in September 2010. NOTE: some of these details are obtained from third party information.

Vendor-n/a Microsoft Corporation Adobe Inc.Apple Inc.

Product-macos acrobat_reader windows acrobat n/a Acrobat and Reader

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0980

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-4.59% / 89.02%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, and CVE-2016-0981.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel iphone_os flash_player_desktop_runtime air_desktop_runtime air_sdk air_sdk_\&_compiler windows windows_8.1 mac_os_x android windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2025-12727

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-8.8||HIGH

EPSS-0.10% / 28.12%

7 Day CHG~0.00%

Published-10 Nov, 2025 | 20:00

Updated-25 Nov, 2025 | 14:53

Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Vendor-Microsoft Corporation Apple Inc.Linux Kernel Organization, Inc Google LLC

Product-chrome windows macos linux_kernel Chrome

CWE ID-CWE-787

Out-of-bounds Write

CVE-2025-24118

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-6.79% / 91.14%

7 Day CHG~0.00%

Published-27 Jan, 2025 | 21:45

Updated-03 Nov, 2025 | 21:19

The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or write kernel memory.

Vendor-Apple Inc.

Product-ipados macos iPadOS macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-11764

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.78% / 73.36%

7 Day CHG~0.00%

Published-14 Apr, 2020 | 22:41

Updated-04 Aug, 2024 | 11:41

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp.

Vendor-openexr n/a Debian GNU/Linux Canonical Ltd.openSUSE Fedora Project Apple Inc.

Product-ubuntu_linux itunes iphone_os debian_linux ipados tvos watchos fedora mac_os_x openexr icloud leap n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1847

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.41% / 60.65%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:44

Updated-03 Aug, 2024 | 16:25

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1747

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.78% / 73.42%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:49

Updated-03 Aug, 2024 | 16:18

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing maliciously crafted web content may lead to code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1776

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.36% / 57.63%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:57

Updated-03 Aug, 2024 | 16:25

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted font file may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1841

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.20% / 42.23%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:44

Updated-03 Aug, 2024 | 16:25

A malicious application may be able to execute arbitrary code with kernel privileges. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. An out-of-bounds write issue was addressed with improved bounds checking.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1882

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.87% / 74.85%

7 Day CHG~0.00%

Published-08 Sep, 2021 | 14:47

Updated-03 Aug, 2024 | 16:25

A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to gain elevated privileges.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-32380

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.25%

7 Day CHG~0.00%

Published-23 Jun, 2023 | 00:00

Updated-05 Dec, 2024 | 18:45

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. Processing a 3D model may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-23225

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.10% / 28.56%

7 Day CHG~0.00%

Published-05 Mar, 2024 | 19:24

Updated-05 Nov, 2025 | 19:15

Known KEV||Action Due Date - 2024-03-27||Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

Vendor-Apple Inc.

Product-tvos watchos ipados macos visionos iphone_os iOS and iPadOS tvos watchos ipad_os macos visionos iphone_os Multiple Products

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-23234

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 3.41%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:36

Updated-04 Nov, 2025 | 19:16

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1805

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.26% / 48.79%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 18:06

Updated-03 Aug, 2024 | 16:25

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, macOS Mojave 10.14.6 Security Update 2021-002. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos mac_os_x macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-23265

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.13% / 32.98%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:35

Updated-04 Nov, 2025 | 19:16

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, tvOS 17.4. An app may be able to cause unexpected system termination or write kernel memory.

Vendor-Apple Inc.

Product-tvos watchos ipados macos visionos iphone_os iOS and iPadOS tvOS visionOS watchOS macOS tvos watchos ipad_os ios macos visionos

CWE ID-CWE-400

Uncontrolled Resource Consumption

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-23214

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.26% / 48.69%

7 Day CHG~0.00%

Published-23 Jan, 2024 | 00:25

Updated-30 May, 2025 | 15:15

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os ipados macos iOS and iPadOS macOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-1760

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.34% / 56.16%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:53

Updated-03 Aug, 2024 | 16:18

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application could execute arbitrary code leading to compromise of user information.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos macOS iOS and iPadOS

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-2498

Matching Score-6

Assigner-Red Hat, Inc.

Matching Score-6

Assigner-Red Hat, Inc.

CVSS Score-6.8||MEDIUM

EPSS-2.65% / 85.48%

7 Day CHG~0.00%

Published-19 Aug, 2010 | 17:43

Updated-11 Apr, 2025 | 00:51

The psh_glyph_find_strong_points function in pshinter/pshalgo.c in FreeType before 2.4.0 does not properly implement hinting masks, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a crafted font file that triggers an invalid free operation.

Vendor-freetype n/a Canonical Ltd.Apple Inc.Debian GNU/Linux

Product-ubuntu_linux debian_linux mac_os_x freetype n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2015-6696

Matching Score-6

Matching Score-6

CVSS Score-6.8||MEDIUM

EPSS-1.50% / 80.89%

7 Day CHG~0.00%

Published-14 Oct, 2015 | 23:00

Updated-12 Apr, 2025 | 10:46

Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Acrobat Reader DC Continuous before 2015.009.20069 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-6698.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_reader macos acrobat_dc windows acrobat n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-2520

Matching Score-6

Assigner-Red Hat, Inc.

Matching Score-6

Assigner-Red Hat, Inc.

CVSS Score-5.1||MEDIUM

EPSS-3.15% / 86.64%

7 Day CHG~0.00%

Published-19 Aug, 2010 | 17:43

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in the Ins_IUP function in truetype/ttinterp.c in FreeType before 2.4.0, when TrueType bytecode support is enabled, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font file.

Vendor-freetype n/a Canonical Ltd.Apple Inc.Debian GNU/Linux

Product-ubuntu_linux debian_linux mac_os_x freetype n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-2519

Matching Score-6

Assigner-Red Hat, Inc.

Matching Score-6

Assigner-Red Hat, Inc.

CVSS Score-6.8||MEDIUM

EPSS-4.52% / 88.93%

7 Day CHG~0.00%

Published-19 Aug, 2010 | 17:43

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in the Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.4.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted length value in a POST fragment header in a font file.

Vendor-freetype n/a Canonical Ltd.Apple Inc.Debian GNU/Linux

Product-ubuntu_linux debian_linux mac_os_x freetype n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0969

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-4.59% / 89.02%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0970, CVE-2016-0972, CVE-2016-0976, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel iphone_os flash_player_desktop_runtime air_desktop_runtime air_sdk air_sdk_\&_compiler windows windows_8.1 mac_os_x android windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2016-0976

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-4.59% / 89.02%

7 Day CHG~0.00%

Published-10 Feb, 2016 | 20:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20.0.0.260, and Adobe AIR SDK & Compiler before 20.0.0.260 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-0964, CVE-2016-0965, CVE-2016-0966, CVE-2016-0967, CVE-2016-0968, CVE-2016-0969, CVE-2016-0970, CVE-2016-0972, CVE-2016-0977, CVE-2016-0978, CVE-2016-0979, CVE-2016-0980, and CVE-2016-0981.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-flash_player chrome_os linux_kernel iphone_os flash_player_desktop_runtime air_desktop_runtime air_sdk air_sdk_\&_compiler windows windows_8.1 mac_os_x android windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2015-5105

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-4.54% / 88.95%

7 Day CHG~0.00%

Published-15 Jul, 2015 | 14:00

Updated-12 Apr, 2025 | 10:46

Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and Acrobat and Acrobat Reader DC Continuous before 2015.008.20082 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-5096 and CVE-2015-5098.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_reader macos acrobat_dc windows acrobat n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-23270

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.04% / 12.38%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:35

Updated-04 Nov, 2025 | 19:16

The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4, tvOS 17.4. An app may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os tvos ipad_os macos iOS and iPadOS tvOS macOS macos tvos ipad_os iphone_os

CWE ID-CWE-787

Out-of-bounds Write

CVE-2015-5098

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-4.54% / 88.95%

7 Day CHG~0.00%

Published-15 Jul, 2015 | 14:00

Updated-12 Apr, 2025 | 10:46

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-acrobat_reader_dc acrobat_reader macos acrobat_dc windows acrobat n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-23226

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-0.88% / 75.00%

7 Day CHG~0.00%

Published-08 Mar, 2024 | 01:35

Updated-04 Nov, 2025 | 19:16

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, tvOS 17.4. Processing web content may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-tvos watchos ipad_os macos visionos iphone_os iOS and iPadOS tvOS visionOS watchOS macOS tvos watchos ipados ios macos visionos

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-23296

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.11% / 29.90%

7 Day CHG+0.03%

Published-05 Mar, 2024 | 19:24

Updated-05 Nov, 2025 | 19:15

Known KEV||Action Due Date - 2024-03-27||Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 17.4 and iPadOS 17.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

Vendor-Apple Inc.

Product-tvos watchos ipados macos visionos iphone_os iOS and iPadOS tvos watchos ipad_os macos visionos iphone_os Multiple Products

CWE ID-CWE-787

Out-of-bounds Write

CVE-2015-8654

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-5.73% / 90.27%

7 Day CHG~0.00%

Published-04 Mar, 2016 | 23:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, CVE-2015-8455, CVE-2015-8652, CVE-2015-8656, CVE-2015-8657, CVE-2015-8658, and CVE-2015-8820.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Google LLC Apple Inc.Microsoft Corporation

Product-air flash_player chrome_os windows_8 linux_kernel iphone_os flash_player_desktop_runtime air_desktop_runtime air_sdk air_sdk_\&_compiler windows windows_8.1 mac_os_x android windows_10 n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-1281

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-14.07% / 94.20%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

iml32.dll in Adobe Shockwave Player before 11.5.7.609 does not validate a certain value from a file before using it in file-pointer calculations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows shockwave_player macos n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-1280

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-29.66% / 96.51%

7 Day CHG~0.00%

Published-13 May, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted .dir (aka Director) file, related to (1) an erroneous dereference and (2) a certain Shock.dir file.

Vendor-n/a Microsoft Corporation Apple Inc.Adobe Inc.

Product-windows shockwave_player macos n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-1283

Matching Score-6

Matching Score-6