Every CVE Search/ Get API key

CVE-2014-1287

USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to...

7.2 HighPublic exploit

USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted USB messages.

Exploit likelihood

1.11%Down 5.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted USB messages.

Record
CVE-2014-1287
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted USB messages.

Record
CVE-2014-1287
Updated
2026-11-02
EUVDEUVD-2014-1365 No score

USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted USB messages.

Record
EUVD-2014-1365
Updated
2026-11-03
GitHub AdvisoriesGHSA-rhrc-5w4h-m6vj No score

USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to...

USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted USB messages.

Record
GHSA-rhrc-5w4h-m6vj
Weakness
CWE-119
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBiOS 7 - Kernel Mode Memory Corruption2014-03-17

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-1287 is a high vulnerability (CVSS 7.2) in Apple Iphone Os, published March 14, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.11%, the 66th percentile. No source names a fixed version.

References

MoveEnter Open