CVE-2016-4667

high

Published 2017-02-20 · Modified 2026-05-13

CVSS v3

8.8

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2

6.8

VIR risk

8.8

Description

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "ATS" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font.

Predictions

Exploit likelihood

92%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: product-security@apple.com — https://support.apple.com/HT207275

OS impact

OS	Version	Status	Fixed in
macos		affected

References

http://www.securityfocus.com/bid/93852
http://www.securitytracker.com/id/1037086
https://support.apple.com/HT207275
http://www.securityfocus.com/bid/93852
http://www.securitytracker.com/id/1037086
https://support.apple.com/HT207275

CWEs

CWE-119

Verify integrity in audit chain (admin only). AS-IS.