CVE-2014-4386

CVE-2014-4386 affects Apple iOS prior to 8, where a race condition in App Installation could let a local user escalate privileges and install an unverified app by writing to /tmp. The issue is documented in Apple’s iOS 8 security note (APPLE-SA-2014-09-17-1) with remediation: iOS 8 fixes include ...