Apple iOS AppleUSBNetworking Memory Corruption Vulnerability (CVE-2016-1734)

Apple iOS AppleUSBNetworking Memory Corruption Vulnerability (CVE-2016-1734)
Apple iOS AppleUSBNetworking Memory Corruption Vulnerability (CVE-2016-1734)

Release date:
Updated on:

Affected Systems:

Apple iOS <9.3

Description:

CVE (CAN) ID: CVE-2016-1734

IOS is an operating system developed by Apple for mobile devices. It supports iPhone, iPod touch, iPad, and Apple TV.

Versions earlier than iOS 9.3 have a security vulnerability in the implementation of AppleUSBNetworking. Because the USB device data is not verified, Memory Corruption may occur and arbitrary code can be executed without the core permission.

<* Source: Andrea Barisani
Andrej Rosano

Link: https://support.apple.com/en-au/HT206166
*>

Suggestion:

Vendor patch:

Apple
-----
Apple has released a Security Bulletin (HT206166) for this purpose and the corresponding patch:
HT206166: About the security content of iOS 9.3
Link: https://support.apple.com/en-au/HT206166

This article permanently updates the link address: