CVE-2014-1356 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Iphone OS

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer2 documents2 sources
Severity
10.0CRITICALNVD
EPSS
3.1%
top 13.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple Iphone OSApple TvosApple MAC OS X
Timeline
PublishedJul 1
Latest updateMay 14

Description

Heap-based buffer overflow in launchd in Apple iOS before 7.1.2, Apple OS X before 10.9.4, and Apple TV before 6.1.2 allows attackers to execute arbitrary code via a crafted application that sends IPC messages.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages3 packages

▶NVDapple/tvos6.1.1+4
▶NVDapple/iphone_os7.1.1+8
▶NVDapple/mac_os_x4 versions+3

🔴Vulnerability Details

1
GHSA
GHSA-j53g-2hxq-wwg5: Heap-based buffer overflow in launchd in Apple iOS before 7↗2022-05-14
▶