CVE-2014-4404
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows...
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.
- Record
CVE-2014-4404- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.
- Record
CVE-2014-4404- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
EUVDEUVD-2014-4331
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.
- Record
EUVD-2014-4331- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-frxp-ch88-g8fc
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows...
Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an application that provides crafted key-mapping properties.
- Record
GHSA-frxp-ch88-g8fc- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-119, CWE-787
- Updated
- 2026-11-02
CISA KEV No score
Apple OS X Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute arbitrary code in a privileged context.
- Record
CVE-2014-4404- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | Mac OS X IOKit Keyboard Driver Root Privilege Escalation | 2014-09-24 |
| Exploit-DB | Apple Mac OSX - IOKit Keyboard Driver Privilege Escalation (Metasploit) | 2014-12-02 |
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation, exploits | ||
| first indexed | CVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-4404 is a high vulnerability (CVSS 7.8) in Apple Iphone Os, published September 18, 2014. CISA lists it as known to be exploited, since February 10, 2022. EUVD reports exploitation since February 10, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 48.9%, the 98th percentile. No source names a fixed version.
References
support.apple.com/HT204659
securitytracker.com/id/1030866
securityfocus.com/bid/69947
archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
Show 9 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/96111
lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-4404
nvd.nist.gov/vuln/detail/CVE-2014-4404
github.com/advisories/GHSA-frxp-ch88-g8fc