VULNERABILITY INTELLIGENCE

CVE-2014-4379

CVSS score7.1 HIGH
EPSS probability2.17%
CISA KEVNot currently listed
Published2014-09-18
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:N/A:N

Description

An unspecified IOHIDFamily function in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking to prevent reading of kernel pointers, which allows attackers to bypass the ASLR protection mechanism via a crafted application.

Weakness classification

  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references