CVE-2014-4405
IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary...
IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via an application that provides crafted key-mapping properties.
Exploit likelihood
What each source reports
NVD Score used
9.3
IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via an application that provides crafted key-mapping properties.
- Record
CVE-2014-4405- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via an application that provides crafted key-mapping properties.
- Record
CVE-2014-4405- Updated
- 2026-11-02
EUVDEUVD-2014-4332 No score
IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via an application that provides crafted key-mapping properties.
- Record
EUVD-2014-4332- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9r2h-3hf3-rrwc No score
IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary...
IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via an application that provides crafted key-mapping properties.
- Record
GHSA-9r2h-3hf3-rrwc- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-4405 is a high vulnerability (CVSS 9.3) in Apple Iphone Os, published September 18, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.54%, the 94th percentile. No source names a fixed version.
References
support.apple.com/HT204659
support.apple.com/kb/HT6441
securitytracker.com/id/1030866
support.apple.com/kb/HT6442
archives.neohapsis.com/archives/bugtraq/2014-10/0101.html
archives.neohapsis.com/archives/bugtraq/2014-09/0107.html
Show 8 moreShow less
securityfocus.com/bid/69882
lists.apple.com/archives/security-announce/2015/Apr/msg00001.html
securityfocus.com/bid/69938
support.apple.com/kb/HT6535
archives.neohapsis.com/archives/bugtraq/2014-09/0106.html
exchange.xforce.ibmcloud.com/vulnerabilities/96109
nvd.nist.gov/vuln/detail/CVE-2014-4405
github.com/advisories/GHSA-9r2h-3hf3-rrwc