CVE-2017-6975: Apple iPhone OS

Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Wi-Fi in Apple iOS before 10.3.1 does not prevent CVE-2017-6956 stack buffer overflow exploitation via a crafted access point. NOTE: because an operating system could potentially isolate itself from CVE-2017-6956 exploitation without patching Broadcom firmware functions, there is a separate CVE ID for the operating-system behavior.

Affected products

• Apple iPhone OS: up to and including 10.3

Published 2017-04-05. Last modified 2026-06-17.