vciy

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS: 28 records in one advisory

28 records announced together, published 2017-02-20, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://support.apple.com/HT207422. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

No record in this batch publishes a fixed version in held sources.

No record in this batch is listed by CISA in held sources.

16 of 28 records name something of its own. For the other 12, held sources say the same thing about each.

What this page does not cover

This batch is 28 of the 68 records that cite the same advisory. The other 40 are different findings announced alongside it.

None of those 40 is grouped with any other. Each one has its own record page and nothing else.

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2016-4691fontparser
CVE-2016-4693makes easier for cryptographic
CVE-2016-7588playback mp4
CVE-2016-7591iohidfamily
CVE-2016-7595no title held
CVE-2016-7606no title held
CVE-2016-7607no title held
CVE-2016-7612no title held
CVE-2016-7615no title held
CVE-2016-7616disk images
CVE-2016-7619libarchive write files symlinks
CVE-2016-7621no title held
CVE-2016-7627coregraphics null pointer dereference
CVE-2016-7636man-in-the-middle ocsp responder urls
CVE-2016-7637no title held
CVE-2016-7643imageio process out-of-bounds read
CVE-2016-7644no title held
CVE-2016-7655external displays type confusion
CVE-2016-7657no title held
CVE-2016-7658no title held
CVE-2016-7659no title held
CVE-2016-7661power management
CVE-2016-7662spoof certificates
CVE-2016-7663corefoundation
CVE-2016-7667no title held
CVE-2016-7714memory-layout

28 records, read from the index as it stood on 2026-09-20. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.