CVE-2016-4655
Published: 25 August 2016
Summary
CVE-2016-4655 is a medium-severity an unspecified weakness vulnerability in Apple Iphone Os. Its CVSS base score is 5.5 (Medium).
Operationally, ranked in the top 0.8% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-16 (Memory Protection) and SI-2 (Flaw Remediation).
Deeper analysis
The kernel component of Apple iOS versions prior to 9.3.5 is affected by an information disclosure vulnerability that permits reading of sensitive data from memory. The flaw is reachable through a crafted application and carries a CVSS 3.1 base score of 5.5, reflecting local attack vector, low complexity, no required privileges, and required user interaction for high confidentiality impact with no integrity or availability consequences.
An attacker who can persuade a user to install and run a malicious application on an unpatched device can exploit the issue to extract kernel memory contents. Because the vector is local and the vulnerability resides in the kernel, the attack does not require network access or elevated privileges beyond the ability to execute the crafted app.
Apple security announcements for iOS 9.3.5 and the subsequent September 2016 updates state that the issue is resolved by installing the patched kernel; administrators and users are advised to apply the available iOS updates to eliminate the exposure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2016-5641
Vulnerability details
The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.
- CWE(s)
- KEV Date Added
- 24 May 2022
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly enforces memory protection mechanisms that block unauthorized reads of kernel memory by user-space apps, addressing the root cause of this disclosure flaw.
Requires timely application of patches that eliminate the kernel information-disclosure vulnerability before exploitation can occur.
Mandates isolation of kernel security functions from untrusted user processes, limiting the ability of a crafted app to reach and read kernel memory.