IOStorageFamily in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local users to obtain sensitive information from kernel memory via unknown vectors.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://www.securitytracker.com/id/1033609 | vdb entry |
https://support.apple.com/HT205212 | vendor advisory |
http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html | vendor advisory |
http://www.securityfocus.com/bid/76764 | vdb entry |
https://support.apple.com/HT205267 | vendor advisory |
http://lists.apple.com/archives/security-announce/2015/Sep/msg00005.html | vendor advisory |
https://support.apple.com/HT205213 | vendor advisory |
http://lists.apple.com/archives/security-announce/2015/Sep/msg00001.html | vendor advisory |