CVE-2015-7092

CVE-2015-7092 is a heap-based buffer overflow vulnerability in Apple QuickTime prior to version 7.7.9. This flaw allows remote attackers to execute arbitrary code or cause a denial of service by crafting a malicious TXXX frame within an ID3 tag in MP3 data embedded in a movie file. With a CVSS score of 6.6 (Medium), exploitation requires user interaction (UI:R) and local access (AV:L), but can lead to high impact on availability (A:H) and low impact on confidentiality and integrity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion, though it was covered by one media article at the time.