CVE-2015-3796: The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attacker...

Security readout for executives and security teams

CVE-2015-3796 is an old Apple libc issue in the TRE regular expression library. On affected iOS and OS X versions, a specially crafted regular expression could corrupt memory, crash an application, or potentially run attacker-controlled code. The main business risk is legacy Apple devices or systems that still process untrusted regular expressions. Exposure is likely limited to legacy Apple environments running iOS earlier than 8.4.1 or OS X earlier than 10.10.5, especially where applications process attacker-influenced regular expressions. Modern systems should be unaffected if they received the Apple security updates. Prioritize remediation if any legacy Apple systems remain in production or regulated environments. The vulnerability is old, but the impact includes code execution and denial of service. If no affected versions exist, track it as historical risk with normal evidence retention. Mitigation focus: Upgrade affected iOS devices to 8.4.1 or later where possible.; Upgrade affected OS X systems to 10.10.5 or later where possible.; Retire or isolate Apple systems that cannot receive the fixed releases..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.