CVE-2014-4486: Null Pointer Dereference
IOAcceleratorFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly handle resource lists and IOService userclient types, which allows attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via a crafted app.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-4486?
CVE-2014-4486 is considered high severity due to its potential to allow arbitrary code execution and denial of service.
How do I fix CVE-2014-4486?
To fix CVE-2014-4486, update your device to the latest version of Apple iOS, macOS, or tvOS that mitigates this vulnerability.
What systems are affected by CVE-2014-4486?
CVE-2014-4486 affects Apple iOS versions prior to 8.1.3, macOS versions before 10.10.2, and tvOS versions below 7.0.3.
What type of vulnerability is CVE-2014-4486?
CVE-2014-4486 is a vulnerability related to improper handling of resource lists and IOService userclient types.
Can CVE-2014-4486 lead to remote attacks?
Yes, CVE-2014-4486 can enable attackers to execute arbitrary code remotely or cause a denial of service.