CVE-2016-4630

Published 22 Jul 2016 · Updated 06 Aug 2024

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.6%

ImageIO in Apple OS X before 10.11.6 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted EXR image with B44 compression.

Affected products

n/a · n/a

References

http://lists.apple.com/archives/security-announce/2016/Jul/msg00000.html https://github.com/openexr/openexr/issues/563 https://support.apple.com/HT206903 http://www.securityfocus.com/bid/91824 http://www.securitytracker.com/id/1036348 http://www.talosintelligence.com/reports/TALOS-2016-0181/