Buffer overflow in FontParser in Apple iOS before 10 OS X before 10.12 tvOS before 10 and watchOS before 3 allows remote attackers to obtain sensitive information from process memory via a crafted font file.