CVE-2014-1372

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2014-07-01 · updated 2026-06-17
Weakness: CWE-264

Description

Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call.

Affected products

macOS: through 10.9.3; 10.8.0, 10.8.1, 10.8.2, 10.8.3, 10.8.4, 10.8.5 (+4)

References

http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html
http://secunia.com/advisories/59475
http://support.apple.com/kb/HT6296
http://www.securitytracker.com/id/1030505
https://code.google.com/p/google-security-research/issues/detail?id=18
http://archives.neohapsis.com/archives/bugtraq/2014-06/0172.html
http://secunia.com/advisories/59475
http://support.apple.com/kb/HT6296
http://www.securitytracker.com/id/1030505
https://code.google.com/p/google-security-research/issues/detail?id=18

Get alerted when CVE-2014-1372 or the next vulnerability affects your stack