CVE-2014-4488 in Apple iOS

Summary

IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly validate resource-queue metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted app.

Reservation

06/20/2014

Disclosure

01/29/2015

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
68931	Apple iOS IOHIDFamily data processing	19	Not defined	Official fix	CVE-2014-4488
68886	Apple Mac OS X IOHIDFamily data processing	19	Unproven	Official fix	CVE-2014-4488