CVE-2014-4390 — Improper Input Validation in Apple MAC OS X

CWE-20 — Improper Input Validation3 documents3 sources
Severity
9.3CRITICALNVD
EPSS
0.7%
top 26.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple MAC OS X
Timeline
PublishedSep 19
Latest updateMay 17

Description

Bluetooth in Apple OS X before 10.9.5 does not properly validate API calls, which allows attackers to execute arbitrary code in a privileged context via a crafted application.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDapple/mac_os_x5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-m2g5-jgx7-6g6c: Bluetooth in Apple OS X before 10↗2022-05-17
▶
Project0
More Mac OS X and iPhone sandbox escapes and kernel bugs - Project Zero↗2014-10-01
▶