CVE Vulnerabilities

CVE-2014-4486

Published: Jan 30, 2015 | Modified: Mar 08, 2019
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

IOAcceleratorFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly handle resource lists and IOService userclient types, which allows attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via a crafted app.

Affected Software

Name Vendor Start Version End Version
Iphone_os Apple * 8.1.2 (including)
Mac_os_x Apple * 10.10.1 (including)
Tvos Apple * 7.0.1 (including)

References