CVE-2015-3795

Vulnerability

A memory corruption vulnerability exists in libxpc on Apple iOS before 8.4.1 and OS X before 10.10.5 (Yosemite). An attacker can trigger the issue by sending a malformed XPC message from a crafted app, which the library fails to properly validate [1][2].

Exploitation

An attacker must first install a maliciously crafted application on the target device. No additional authentication or network position is required beyond app installation. By sending a malformed XPC message, the attacker can corrupt memory in the libxpc process, potentially leading to arbitrary code execution [1][2].

Impact

Successful exploitation allows an attacker to execute arbitrary code in a privileged system context, or cause a denial of service through memory corruption. This gives the attacker elevated privileges beyond the app's sandbox [1][2].

Mitigation

Apple addressed this vulnerability in iOS 8.4.1 and OS X Yosemite v10.10.5 (Security Update 2015-006). Users should update to these or later versions [1][2].