NetSight
critical9.3

CVE-2014-4380

The IOHIDFamily kernel extension in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execut…

Impact

The IOHIDFamily kernel extension in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code in the kernel's context via a crafted application.

Affected products

VendorProductAffected versions
AppleTvos
through 6.2
Versions 6.0, 6.0.1, 6.0.2, 6.1, 6.1.1
AppleIphone Os
through 7.1.2
Versions 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4
AppleMac Os X
through 10.0.2

Weakness classification

References