CVE-2014-4380
At a glance Severity Not available EPSS EPSS 3.22 % · percentile 88 (2026-10-27) State PUBLISHED Published 2014-09-18 Updated 2024-08-06 Assigner apple NVD status Modified Description The IOHIDFamily kernel extension in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code in the kernel's context via a crafted application.
Scores Version Score Vector Scored by CVSS 2.0 HIGH 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* ≤ 6.2cpe:2.3:o:apple:tvos:6.0:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:6.0.1:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:6.0.2:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:6.1:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:6.1.1:*:*:*:*:*:*:*cpe:2.3:o:apple:tvos:6.1.2:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* ≤ 7.1.2cpe:2.3:o:apple:iphone_os:7.0:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.1:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.2:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.3:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.4:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.5:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.0.6:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.1:*:*:*:*:*:*:*cpe:2.3:o:apple:iphone_os:7.1.1:*:*:*:*:*:*:*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* ≤ 10.0.2Affected products Product Versions affected n/a
References
Sources
