CVE-2014-4461

No fix known EPSS 3%

The kernel in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate IOSharedDataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted application.

Published 2014-11-18 · CVE record · OSV

Products: apple iphone_os, apple mac_os_x, apple tvos