CVE-2014-4373

MEDIUM

Apple iOS <8, Apple TV <7 - DoS

Title source: llm

Description

The IntelAccelerator driver in the IOAcceleratorFamily subsystem in Apple iOS before 8 and Apple TV before 7 allows attackers to cause a denial of service (NULL pointer dereference and device restart) via a crafted application.

References (10)

[Third Party Advisory] http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html

[Third Party Advisory] http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html

[Vendor Advisory] http://support.apple.com/kb/HT6441

[Vendor Advisory] http://support.apple.com/kb/HT6442

[Vendor Advisory] https://support.apple.com/kb/HT6535

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/69882

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/69934

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/96108

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1030866

[Third Party Advisory] http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html

Scores

CVSS v3 5.5

EPSS 0.0019

EPSS Percentile 40.9%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Classification

Status draft

Affected Products (18)

apple/iphone_os < 7.1.2

apple/iphone_os

apple/tvos < 6.2

apple/tvos

... and 3 more

Timeline

Published Sep 18, 2014

Tracked Since Feb 18, 2026