VIR Vulnerability Intelligence Relay

CVE-2014-4389

critical
Published 2014-09-18 · Modified 2026-05-06
CVSS v3
—
CVSS v2
9.3
VIR risk
9.3

Description

Integer overflow in IOKit in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted API arguments.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: product-security@apple.com — http://support.apple.com/kb/HT6443

vendor Authored 2026-05-27

Vendor advisory: product-security@apple.com — http://support.apple.com/HT204244

OS impact
OSVersionStatusFixed in
macos macosaffected
macos macos7.0affected
macos macos7.0.1affected
macos macos7.0.2affected
macos macos7.0.3affected
macos macos7.0.4affected
macos macos7.0.5affected
macos macos7.0.6affected
macos macos7.1affected
macos macos7.1.1affected
macos macos6.0affected
macos macos6.0.1affected
macos macos6.0.2affected
macos macos6.1affected
macos macos6.1.1affected
macos macos6.1.2affected

References

CWEs

CWE-189

Verify integrity in audit chain (admin only). AS-IS.