CVE-2014-4418

IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a…

published September 18, 2014

CVSS
—
EPSS
2%
Percentile
76.4
In the wild
Unconfirmed
What it is

IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via an application that provides crafted values in unspecified metadata fields, a different vulnerability than CVE-2014-4388.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01656 · 76.4th percentile
Published
2014-09-18T10:00Z
EPSS history
Timeline
  • 18 SEP 10:00Z
    IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code in a…
    cvelistv5