CVE-2015-5840

Vulnerability

The checkint division routines in the removefile utility in Apple iOS before version 9 contain an overflow fault that can be triggered by crafted data. This vulnerability affects all iOS devices running versions prior to 9 [1].

Exploitation

An attacker can cause a denial of service by providing crafted data to the affected division routines. No authentication or special network position is required; the attack can be triggered by processing malicious input, potentially via a crafted file or network packet.

Impact

Successful exploitation leads to an overflow fault, causing the application to crash and resulting in a denial of service. The impact is limited to temporary unavailability of the affected service or device.

Mitigation

Apple addressed this issue in iOS 9, released on September 16, 2015. Users should update to iOS 9 or later to mitigate the vulnerability. No workarounds are available [1].