CVE-2012-3722

The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.

• CWE-399

• http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.htmlVendor Advisory
• http://support.apple.com/kb/HT5501Vendor Advisory
• http://support.apple.com/kb/HT5503Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78715
• http://lists.apple.com/archives/security-announce/2012/Sep/msg00003.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.htmlVendor Advisory
• http://support.apple.com/kb/HT5501Vendor Advisory
• http://support.apple.com/kb/HT5503Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78715

Published

Sep 20, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3716CoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remot…
• CVE-2012-3717Rejected reason: This candidate is unused by its CNA.
• CVE-2012-3718Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 allows…
• CVE-2012-3719Mail in Apple Mac OS X before 10.7.5 does not properly handl…
• CVE-2012-3720Mobile Accounts in Apple Mac OS X before 10.7.5 and 10.8.x b…
• CVE-2012-3721Profile Manager in Apple Mac OS X before 10.7.5 does not pro…
• CVE-2012-3723Apple Mac OS X before 10.7.5 does not properly handle the bN…
• CVE-2012-3724CFNetwork in Apple iOS before 6 does not properly identify t…
• CVE-2012-3725The DNAv4 protocol implementation in the DHCP component in A…
• CVE-2012-3726Double free vulnerability in ImageIO in Apple iOS before 6 a…
• CVE-2012-3727Buffer overflow in the IPsec component in Apple iOS before 6…
• CVE-2012-3728The kernel in Apple iOS before 6 dereferences invalid pointe…