libxml2, as used in Apple iOS before 9.3.2 and OS X before 10.11.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1835