CVE-2016-4657
High · 8.8 CISA KEVCVSS
8.8
EPSS
66.8%
Published
Aug 25, 2016
CISA due date
Jun 14, 2022
The record
WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:5 | webkit2 | 0 | 2.14.5-1.mga5 |
| Ubuntu:16.04:LTS | qtwebkit-opensource-src | 0 | No fix |
| Ubuntu:16.04:LTS | qtwebkit-source | 0 | No fix |
| Ubuntu:16.04:LTS | webkit2gtk | 0 | 2.14.2-0ubuntu0.16.04.1 |
| Ubuntu:16.04:LTS | webkitgtk | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | qtwebkit-opensource-src | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | qtwebkit-source | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | webkitgtk | 0 | No fix |
Related vulnerabilities
- CVE-2017-2350 An issue was discovered in certain Apple products. Also affects webkit2
- CVE-2016-7586 An issue was discovered in certain Apple products. Also affects webkit2
- CVE-2016-4613 An issue was discovered in certain Apple products. Also affects webkit2
- CVE-2016-4622 WebKit in Apple iOS before 9.3.3, Safari before 9.1.2, and tvOS before 9.2.2 allows… Also affects webkit2
- CVE-2016-1854 WebKit, as used in Apple iOS before 9.3.2, Safari before 9.1.1, and tvOS before 9.2.1… Also affects webkit2
- CVE-2015-1155 The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before… Also affects webkit2
- CVE-2024-54534 The issue was addressed with improved memory handling. Also affects qtwebkit-opensource-src
- CVE-2024-54508 The issue was addressed with improved memory handling. Also affects qtwebkit-opensource-src