CVE-2015-1157

CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service ...

7.8 HighPublic exploit

CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted Unicode text that is not properly handled during display truncation in the Notifications feature, as demonstrated by Arabic characters in (1) an SMS message or (2) a WhatsApp message.

Exploit likelihood

5.62%Up 1.8 points since Feb 4, 2022

What each source reports

NVD Score used 7.8

Record: CVE-2015-1157
CVSS 2.0: 7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness: CWE-17
Updated: 2026-11-02

CVE List No score

Record: CVE-2015-1157
Updated: 2026-11-02

EUVDEUVD-2015-1300 No score

Record: EUVD-2015-1300
Updated: 2026-11-03

GitHub AdvisoriesGHSA-r4wc-44ww-v8f2 No score

CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service ...

Record: GHSA-r4wc-44ww-v8f2
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
PoC in GitHub	perillamint/CVE-2015-1157	2015-10-14

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-1157 is a high vulnerability (CVSS 7.8) in Apple Iphone Os, published May 28, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.62%, the 92nd percentile. No source names a fixed version.

References

Show 11 moreShow less