2764 matches found
CVE-2014-4407
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly initialize kernel memory, which allows attackers to obtain sensitive memory-content information via an application that makes crafted IOKit function calls...
CVE-2014-4388
IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via an application that provides crafted values in unspecified metadata fields, a different vulnerability than...
CVE-2014-4419
CVE-2014-4419: Kernel memory disclosure via uninitialized memory in the Apple OS X/iOS network statistics interface (kernel). The issue allows a crafted application to obtain sensitive memory content and memory-layout information. Affected platform references in the public data point to OS X kern...
CVE-2014-4378
CVE-2014-4378 affects CoreGraphics in Apple iOS before 8 and Apple TV before 7. A crafted PDF can trigger an out-of-bounds read, potentially allowing an attacker to obtain sensitive information or cause an application crash (DoS). The vulnerability is due to improper bounds checking in PDF handli...
CVE-2014-4357
CVE-2014-4357 affects the Accounts Framework in iOS prior to 8 and Apple TV prior to 7, allowing an attacker to read sensitive user information from logs. The linked Apple security update notes confirm CVE-4357 is addressed in iOS 8 / Apple TV 7 (and later) by updating the Accounts handling; no a...
CVE-2014-4381
Libnotify in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code as root via a crafted application...
CVE-2014-4411
CVE-2014-4411 affects WebKit as used in Apple iOS prior to 8 and Apple TV prior to 7. It enables remote attackers to execute arbitrary code or cause a denial of service via a crafted web site, via memory corruption and application crash. Root cause: memory corruption in WebKit triggered by crafte...
CVE-2014-4415
WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and...
CVE-2014-4388
CVE-2014-4388 affects IOKit IODataQueue on Apple devices (iOS before 8, Apple TV before 7). The issue is a validation flaw in IODataQueue metadata fields stored in shared memory that can be manipulated by a user to corrupt memory, enabling arbitrary code execution in kernel/system context. Connec...
CVE-2014-4375
Double free vulnerability in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service device crash via vectors related to Mach ports...
CVE-2014-4412
CVE-2014-4412 affects WebKit as used in Apple iOS before 8 and Apple TV before 7. The vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and app crash) via a crafted website. Root cause is memory corruption in WebKit; the documents do n...
CVE-2014-4379
An unspecified IOHIDFamily function in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking to prevent reading of kernel pointers, which allows attackers to bypass the ASLR protection mechanism via a crafted application...
CVE-2014-4375
CVE-2014-4375 is a local privilege-escalation and denial-of-service risk tied to a double-free in Mach ports within Apple iOS pre-8 and Apple TV pre-7. Public docs tie the issue to kernel/Mach ports handling, with confirmed remediation in iOS 8 and Apple TV 7 security updates. Affected components...
CVE-2014-4405
CVE-2014-4405 affects IOHIDFamily in Apple iOS prior to 8 and Apple TV prior to 7. The description cites a memory handling issue in IOHIDFamily’s key-mapping properties that can lead to a NULL pointer dereference, enabling arbitrary code execution in a privileged context or a denial of service. C...
CVE-2014-4380
Concretely, CVE-2014-4380 is tied to IOHIDFamily in macOS (OS X Yosemite 10.10.x up to 10.10.2). The issue is a heap buffer overflow in IOHIDFamily's handling of key-mapping properties that could allow a local user to execute arbitrary code with system privileges. Mitigation in the connected doc ...
CVE-2014-4380
The IOHIDFamily kernel extension in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code in the kernel's context via a crafted application...
CVE-2014-4369
The IOAcceleratorFamily API implementation in Apple iOS before 8 and Apple TV before 7 allows attackers to cause a denial of service NULL pointer dereference and device crash via an application that uses crafted arguments...
CVE-2014-4364
CVE-2014-4364 affects the 802.1X subsystem in Apple iOS before 8 and Apple TV before 7. An attacker can remotely trigger credentials exfiltration by offering LEAP authentication from a crafted Wi‑Fi AP, then perform a cryptographic attack against the MS-CHAPv1 hash to derive credentials. Public r...
CVE-2014-4373
The IntelAccelerator driver in the IOAcceleratorFamily subsystem in Apple iOS before 8 and Apple TV before 7 allows attackers to cause a denial of service NULL pointer dereference and device restart via a crafted application...