Every CVESearch/Get API key

CVE-2014-4497

Integer signedness error in IOBluetoothFamily in the Bluetooth implementation in Apple OS X...

10.0 High

CVE-2014-4497 is a high vulnerability (CVSS 10.0) in Apple Mac Os X, published January 30, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.38%, the 84th percentile. No source names a fixed version.

Severity
10.0 HighCVSS 2.0, NVD
Exploit chance
2.38%EPSS, 84th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Integer signedness error in IOBluetoothFamily in the Bluetooth implementation in Apple OS X before 10.10 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (write to kernel memory) via a crafted app.

Exploit likelihood

2.38%Up 0.2 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used10.0

Integer signedness error in IOBluetoothFamily in the Bluetooth implementation in Apple OS X before 10.10 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (write to kernel memory) via a crafted app.

Record
CVE-2014-4497
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-189
Updated
2026-11-02
CVE ListNo score

Integer signedness error in IOBluetoothFamily in the Bluetooth implementation in Apple OS X before 10.10 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (write to kernel memory) via a crafted app.

Record
CVE-2014-4497
Updated
2026-11-02
EUVDEUVD-2014-4424No score

Integer signedness error in IOBluetoothFamily in the Bluetooth implementation in Apple OS X before 10.10 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (write to kernel memory) via a crafted app.

Record
EUVD-2014-4424
Updated
2026-11-03
GitHub AdvisoriesGHSA-p7hc-j45p-4mhvNo score

Integer signedness error in IOBluetoothFamily in the Bluetooth implementation in Apple OS X...

Integer signedness error in IOBluetoothFamily in the Bluetooth implementation in Apple OS X before 10.10 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (write to kernel memory) via a crafted app.

Record
GHSA-p7hc-j45p-4mhv
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open