CVE-2014-4487

Affected products include Apple iOS, OS X, and Apple TV, with CVE-2014-4487 in IOHIDFamily. The issue is a buffer overflow in IOHIDFamily that allows arbitrary code execution in a privileged context. Apple references indicate updates: iOS 8.1.3, OS X 10.10.2, and Apple TV 7.0.3, addressing the vu...

PT-2015-3751

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.3 Apple OS X versions prior to 10.10.2 Apple TV versions prior to 7.0.3 Description A buffer overflow issue in the IOHIDFamily component allows attackers to execute arbitrary code in a privileged context via a...

PT-2015-3752

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.3 Apple OS X versions prior to 10.10.2 Apple TV versions prior to 7.0.3 Description The issue is related to the IOHIDFamily component, which does not properly validate resource-queue metadata. This allows...

PT-2015-4103

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.2 Description The issue allows attackers to execute arbitrary code in a privileged context via a crafted app. This is due to multiple unspecified vulnerabilities in the Bluetooth driver. Recommendations For...

CVE-2014-8824: Improper Input Validation

The kernel in Apple OS X before 10.10.2 does not properly validate IODataQueue object metadata fields, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2014-4488: Undefined Security Weakness

IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly validate resource-queue metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted app...

CVE-2014-8837: Undefined Security Weakness

Multiple unspecified vulnerabilities in the Bluetooth driver in Apple OS X before 10.10.2 allow attackers to execute arbitrary code in a privileged context via a crafted app...

Code injection

The kernel in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate IOSharedDataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted application...

PT-2014-5921

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 8.1.1 Apple TV versions prior to 7.0.2 Description The issue is related to the improper validation of IOSharedDataQueue object metadata in the kernel. This allows attackers to execute arbitrary code in a privileged...

CVE-2014-4461: Improper Input Validation

The kernel in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate IOSharedDataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted application...

CVE-2014-4390

Bluetooth in Apple OS X before 10.9.5 does not properly validate API calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application...

CVE-2014-4398

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394,...

Null pointer dereference

IOKit in IOAcceleratorFamily in Apple OS X before 10.9.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service NULL pointer dereference via an application that provides crafted API arguments...

Code injection

Bluetooth in Apple OS X before 10.9.5 does not properly validate API calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application...

Code injection

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394,...

Code injection

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4395,...

Code injection

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394,...

Design/Logic Flaw

An unspecified IOAcceleratorFamily function in Apple OS X before 10.9.5 lacks proper bounds checking on read operations, which allows attackers to execute arbitrary code in a privileged context via a crafted application...

Code injection

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394,...

Code injection

An unspecified integrated graphics driver routine in the Intel Graphics Driver subsystem in Apple OS X before 10.9.5 does not properly validate calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application, a different vulnerability than CVE-2014-4394,...