Description
ImageIO in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly initialize an unspecified data structure, which allows remote attackers to obtain sensitive information from process memory via a crafted PNG image.
References
- https://support.apple.com/kb/HT205030
- 1033275 vdb-entry
- APPLE-SA-2015-08-13-2 vendor-advisory
- APPLE-SA-2015-08-13-3 vendor-advisory
- https://support.apple.com/kb/HT205031
- 76343 vdb-entry