CVE-2014-4378: Buffer Overflow
CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted PDF document.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4378?
CVE-2014-4378 has been classified as a high severity vulnerability due to its potential for remote exploitation and denial of service.
How do I fix CVE-2014-4378?
To fix CVE-2014-4378, update to the latest version of iOS or tvOS that addresses this vulnerability.
What systems are affected by CVE-2014-4378?
CVE-2014-4378 affects Apple iOS versions prior to 8, tvOS versions prior to 7, and macOS versions up to 10.9.4.
What type of attack does CVE-2014-4378 enable?
CVE-2014-4378 allows attackers to carry out out-of-bounds read operations via crafted PDF documents, potentially leading to sensitive information disclosure or application crashes.
Is there a known exploit for CVE-2014-4378?
While no specific exploits have been publicly disclosed for CVE-2014-4378, the nature of the vulnerability suggests a risk for remote exploitation through specially crafted files.