CVE-2014-4496

The mach_port_kobject interface in the kernel in Apple iOS before 8.1.3 and Apple TV before 7.0.3 does not properly restrict kernel-address and…

published January 30, 2015

CVSS
—
EPSS
2%
Percentile
78.5
In the wild
Unconfirmed
What it is

The mach_port_kobject interface in the kernel in Apple iOS before 8.1.3 and Apple TV before 7.0.3 does not properly restrict kernel-address and heap-permutation information, which makes it easier for attackers to bypass the ASLR protection mechanism via a crafted app.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01816 · 78.5th percentile
Published
2015-01-30T11:00Z
EPSS history
Timeline
  • 30 JAN 11:00Z
    The mach_port_kobject interface in the kernel in Apple iOS before 8.1.3 and Apple TV before 7.0.3 does not properly restrict kernel-address and…
    cvelistv5