Cisco Talos has discovered a vulnerability in the way in which the Image I/O API parses and handles tiled TIFF image files. The vulnerability affects both OS X 10.11.5 and iOS 9.3.2 and is believed to be present in all previous versions of Apple’s OS X. The vulnerabilities can be exploited to then cause remote code execution on the device. The attacks are an excellent vector for attacks since they can easily be distributed over the web or email traffic.”]
Source: https://blog.talosintelligence.com/2016/07/apple-image-rce.html