CVE-2015-5756: FontParser in Apple iOS before 8.4.1 and OS X before 10.10.5 allows remote attackers to execute arbitrary c...

Security readout for executives and security teams

This Apple FontParser flaw could let a remote attacker crash an affected app or potentially run code if a vulnerable iPhone, iPad, or Mac processed a malicious font file. The source bundle names fixes in iOS 8.4.1 and OS X 10.10.5. There is no provided evidence of active exploitation. Exposure is most likely limited to legacy Apple endpoints still running iOS versions earlier than 8.4.1 or OS X versions earlier than 10.10.5, especially where users or applications process untrusted font content. Modern fully updated Apple systems are not identified as affected in the provided sources. Prioritize remediation if the organization still operates obsolete Apple devices. For normal managed fleets, this is mainly a legacy hygiene issue, but unpatched affected systems carry remote code execution and crash risk when handling malicious fonts. Mitigation focus: Update affected iOS devices to 8.4.1 or later where supported.; Update affected OS X systems to 10.10.5 or later where supported.; Retire or isolate devices that cannot receive vendor security updates..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.