CVE-2014-4495

The kernel in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not enforce the read-only attribute of a shared memory segment during use of a custom cache mode, which allows attackers to bypass intended access restrictions via a crafted app.

Score
CVSS 2.0 10.0 Critical
Status
Modified - product-security@apple.com
Published
2015-01-30
Last modified
2024-08-06
Weaknesses
CWE-264

Affected products

References

 
 
© AVABIS GmbH privacypolicy about