CVE-2014-4496
EUVD-2014-442330.01.2015, 11:59
The mach_port_kobject interface in the kernel in Apple iOS before 8.1.3 and Apple TV before 7.0.3 does not properly restrict kernel-address and heap-permutation information, which makes it easier for attackers to bypass the ASLR protection mechanism via a crafted app.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apple | iphone_os | 𝑥 ≤ 8.1.2 |
| apple | tvos | 𝑥 ≤ 7.0.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References