Apple · Coretext · CVE-2016-7667
**Name of the Vulnerable Software and Affected Versions**
iOS versions prior to 10.2
macOS versions prior to 10.12.2
**Description**
The issue involves the CoreText component and allows remote attackers to cause a denial of service via a crafted string. It exists due to insufficient input validation, which can be exploited by a remote attacker to cause a denial of service using a specially crafted string.
**Recommendations**
For iOS versions prior to 10.2, update to version 10.2 or later.
For macOS versions prior to 10.12.2, update to version 10.12.2 or later.
As a temporary workaround, consider restricting the use of the CoreText component until a patch is available.