CVE-2014-4461

Publication date

2014-11-18 11:00:00

Family

apple

State

PUBLISHED

Description

The kernel in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate IOSharedDataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted application.