CVE-2016-4646: Apple Mac OS X

Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Audio in Apple OS X before 10.11.6 mishandles a size value, which allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read) via a crafted audio file.

Affected products

• Apple Mac OS X: up to and including 10.11.5

Published 2016-07-22. Last modified 2026-06-17.