CVE-2014-4436 Memory corruption in n/a

Medium 4.3 Published 18 Oct 2014 Updated 6 Aug 2024

Attackers can cause denial of service via out-of-bounds read in IOHIDFamily by tricking users into running a crafted application on macOS.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2014-4436?

CVE-2014-4436 is a medium-severity memory corruption vulnerability in Apple Mac Os X, published on 18 Oct 2014. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

IOHIDFamily in Apple OS X before 10.10 allows attackers to cause denial of service (out-of-bounds read operation) via a crafted application.

Weakness: CWE-119

Which versions are affected by CVE-2014-4436?

It affects 1 product.

Products include Apple Mac Os X.

How do I fix CVE-2014-4436?

No fix has been published for CVE-2014-4436 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2014-4436 being exploited?

There is no known exploitation of CVE-2014-4436 in the wild and no public exploit code.

All Apple Mac Os X vulnerabilities

Sources

Also known as GHSA-296f-j97f-9r25.