VULNERABILITY INTELLIGENCE

CVE-2014-1372

CVSS score4.9 MEDIUM
EPSS probability0.47%
CISA KEVNot currently listed
Published2014-07-01
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:C/I:N/A:N

Description

Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call.

Primary references