CVE-2015-3683
Description
The Bluetooth HCI interface implementation in Apple OS X before 10.10.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
A crafted app can trigger memory corruption in Apple OS X's Bluetooth HCI interface, leading to arbitrary code execution in a privileged context.
Vulnerability
A memory corruption vulnerability exists in the Bluetooth HCI interface implementation of Apple OS X before 10.10.4. An attacker can trigger this flaw by running a specially crafted application on the system. The affected versions include OS X Yosemite v10.10 to v10.10.3 and potentially earlier releases [1].
Exploitation
Exploitation requires the attacker to have the ability to run a malicious app on the target system. No other special network position or authentication is described; the crafted app directly interacts with the vulnerable Bluetooth HCI interface to cause memory corruption [1].
Impact
Successful exploitation allows the attacker to execute arbitrary code in a privileged context or cause a denial of service via memory corruption. This can lead to full compromise of the system's integrity and confidentiality [1].
Mitigation
Apple addressed this vulnerability in OS X Yosemite v10.10.4, released on June 30, 2015. Users should update to OS X 10.10.4 or later via the Software Update mechanism or Apple Support downloads [1]. No workaround is mentioned for unpatched systems.
AI Insight generated on May 23, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
2- Range: <10.10.4
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- lists.apple.com/archives/security-announce/2015/Jun/msg00002.htmlnvdPatchVendor Advisory
- support.apple.com/kb/HT204942nvdVendor Advisory
- www.securityfocus.com/bid/75493nvd
- www.securitytracker.com/id/1032760nvd
News mentions
0No linked articles in our index yet.