CVE-2015-7988: Apple Airport Base Station Firmware

Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days.

The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.

Affected products

• Apple Airport Base Station Firmware: from 7.6, before 7.6.7 (fixed in 7.6.7); from 7.7, before 7.7.7 (fixed in 7.7.7)
• Apple iPhone OS: from 9.0, before 9.1 (fixed in 9.1)
• Apple Mac OS X: from 10.9, before 10.9.5 (fixed in 10.9.5); from 10.10.0, before 10.10.5 (fixed in 10.10.5); from 10.11.0, before 10.11.1 (fixed in 10.11.1)
• Apple Mdnsresponder: before 625.41.2 (fixed in 625.41.2)
• Apple watchOS: before 2.1 (fixed in 2.1)

Published 2016-06-26. Last modified 2026-06-17.