CVE-2014-4486

IOAcceleratorFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly handle resource lists and IOService userclient types, which allows attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via a crafted app.

Score
CVSS 2.0 10.0 Critical
Status
Modified - product-security@apple.com
Published
2015-01-30
Last modified
2024-08-06

Affected products

References

 
 
© AVABIS GmbH privacypolicy about