Apple iOS 6.0/6.1/7.0.5 on ARM ptmx_get_ioctl memory corruption

Summaryinfo

A vulnerability, which was classified as critical, has been found in Apple iOS 6.0/6.1/7.0.5 on ARM. This affects the function ptmx_get_ioctl. This manipulation causes memory corruption. The identification of this vulnerability is CVE-2014-1278. There is no exploit available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability has been found in Apple iOS 6.0/6.1/7.0.5 on ARM (Smartphone Operating System) and classified as critical. Affected by this vulnerability is the function ptmx_get_ioctl. The manipulation with an unknown input leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

The ptmx_get_ioctl function in the ARM kernel in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to gain privileges or cause a denial of service (out-of-bounds memory access and device crash) via a crafted call.

The weakness was shared 03/11/2014 as HT6162 as confirmed advisory (Website). It is possible to read the advisory at support.apple.com. This vulnerability is known as CVE-2014-1278 since 01/08/2014. The exploitation appears to be easy. Attacking locally is a requirement. The exploitation doesn't need any form of authentication. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 05/08/2026). It is expected to see the exploit prices for this product increasing in the near future.

The vulnerability scanner Nessus provides a plugin with the ID 72962 (Apple TV < 6.1 Multiple Vulnerabilities), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Misc. and running in the context r.

Upgrading to version 7.1 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.

The vulnerability is also documented in the databases at X-Force (91706), Tenable (72962) and SecurityFocus (BID 54270†). The entries VDB-5639, VDB-9023, VDB-10844 and VDB-10845 are related to this item. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Smartphone Operating System

Vendor

• Apple

Name

• iOS

Version

• 6.0
• 6.1
• 7.0.5

License

• commercial

Website

• Vendor: https://www.apple.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion