CVE-2016-4658: apple iphone_os
Vulnerability summary
CVE-2016-4658 is a high (CVSS 10.0) vulnerability in apple iphone_os. EPSS estimates a 8.56% chance of exploitation in the next 30 days, higher than 95% of scored vulnerabilities.
Severe, CVSS 9.8 (NVD); no exploitation reported by the 5 checked sources; EPSS 9% (FIRST, 03-11-2026)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 11 · Related 8Timeline
- 25-09-2016PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document.
CVSS metrics
6 scores · 5 sources · 2 versions- OSV · Red hatEcosystem advisory · calculated5.3MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NDiffers
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · RubygemsEcosystem advisory · calculated9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
8.56%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
No change 0.00 pp
From 8.56% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Suse12 products
- libxml2-python&distro=SUSE Linux Enterprise Server 11 SP4< 2.7.6-0.50.4
- libxml2-python&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 2.7.6-0.50.4
- libxml2&distro=SUSE Linux Enterprise Desktop 12 SP1< 2.9.1-26.3.1
- libxml2&distro=SUSE Linux Enterprise Server 11 SP4< 2.7.6-0.50.1
- libxml2&distro=SUSE Linux Enterprise Server 12 SP1< 2.9.1-26.3.1
Redhat5 products
- libxml2< 0:2.9.1-6.el7_9.6
- libxml2-debuginfo< 0:2.9.1-6.el7_9.6
- libxml2-devel< 0:2.9.1-6.el7_9.6
- libxml2-python< 0:2.9.1-6.el7_9.6
- libxml2-static< 0:2.9.1-6.el7_9.6
Debian1 product
- libxml2< 2.9.4+dfsg1-2.1
RubyGems1 product
- nokogiri< 1.7.1
Ubuntu1 product
- libxml2< 2.9.1+dfsg1-3ubuntu4.9 | < 2.9.3+dfsg1-1ubuntu0.2
Xmlsoft1 product
- libxml2< 2.9.5
7 vendors · 25 products
References
28 links- lists.apple.com/archives/security-announce/2016/Sep/msg00006.htmlVendor AdvisoryX Refsource APPLEMailing ListREPORTWEB
- lists.apple.com/archives/security-announce/2016/Sep/msg00008.htmlVendor AdvisoryX Refsource APPLEMailing ListREPORTWEB
- lists.apple.com/archives/security-announce/2016/Sep/msg00010.htmlVendor AdvisoryX Refsource APPLEMailing ListREPORTWEB
- lists.apple.com/archives/security-announce/2016/Sep/msg00011.htmlVendor AdvisoryX Refsource APPLEMailing ListREPORTWEB
Show all 28 references
- git.gnome.org/browse/libxml2/commit/?id=c1d1f7121194036608bf555f08d3062a36fd344bX Refsource CONFIRMPatchThird Party AdvisoryWEB
