CVE-2016-4665

Vulnerability

The vulnerability resides in the "Sandbox Profiles" component of Apple iOS (prior to 10.1), tvOS (prior to 10.0.1), and watchOS (prior to 3.1). A crafted application can bypass sandbox restrictions to read metadata associated with audio recordings. The affected products are iOS before 10.1, tvOS before 10.0.1, and watchOS before 3.1 [1][2][3].

Exploitation

An attacker must convince the user to install a specially crafted app. No other special network position or authentication is required; once the app is installed and executed on the device, it can directly access audio-recording metadata without additional user interaction.

Impact

A successful exploit allows the crafted app to read audio-recording metadata, leading to disclosure of potentially sensitive information (e.g., recording dates, duration, or file names). The attacker does not gain access to the audio content itself, only metadata. No other system compromise is achieved.

Mitigation

Apple addressed this issue in iOS 10.1, tvOS 10.0.1, and watchOS 3.1, all released on October 24, 2016 [1][2][3]. Users should update their devices to these or later versions. There is no workaround for older, unpatched versions.