Description
CCrypt in corecrypto in CommonCrypto in Apple iOS before 10 and OS X before 10.12 allows attackers to discover cleartext information by leveraging a function call that specifies the same buffer for input and output.
References
- 1036858 vdb-entry
- APPLE-SA-2016-09-20 vendor-advisory
- APPLE-SA-2016-09-20-3 vendor-advisory
- 93056 vdb-entry
- https://support.apple.com/HT207170
- https://support.apple.com/HT207143