CVE-2014-4375

high

Published 2014-09-18 · Modified 2026-05-06

CVSS v3

7.8

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2

7.2

VIR risk

7.8

Description

Double free vulnerability in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service (device crash) via vectors related to Mach ports.

Predictions

Exploit likelihood

75%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: product-security@apple.com — https://support.apple.com/kb/HT6535

OS impact

OS	Version	Status
macos		affected
macos	6.0	affected
macos	6.0.1	affected
macos	6.0.2	affected
macos	6.1	affected
macos	6.1.1	affected
macos	6.1.2	affected
macos	7.0	affected
macos	7.0.1	affected
macos	7.0.2	affected
macos	7.0.3	affected
macos	7.0.4	affected
macos	7.0.5	affected
macos	7.0.6	affected
macos	7.1	affected
macos	7.1.1	affected

References

http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html
http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html
http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
http://support.apple.com/kb/HT6441
http://support.apple.com/kb/HT6442
http://www.securityfocus.com/bid/69882
http://www.securityfocus.com/bid/69944
http://www.securitytracker.com/id/1030866
https://exchange.xforce.ibmcloud.com/vulnerabilities/96090
https://support.apple.com/kb/HT6535
http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html
http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html
http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
http://support.apple.com/kb/HT6441
http://support.apple.com/kb/HT6442
http://www.securityfocus.com/bid/69882
http://www.securityfocus.com/bid/69944
http://www.securitytracker.com/id/1030866
https://exchange.xforce.ibmcloud.com/vulnerabilities/96090
https://support.apple.com/kb/HT6535

Verify integrity in audit chain (admin only). AS-IS.