CVE-2014-1372
Last modified
CVE-2014-1372 is a vulnerability of currently unknown severity. Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call.. EPSS estimates a 0.47% chance of exploitation in the next 30 days.
Description
Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Mac Os X | <= 10.9.3 |
| Apple | Mac Os X | 10.8.0 |
| Apple | Mac Os X | 10.8.1 |
| Apple | Mac Os X | 10.8.2 |
| Apple | Mac Os X | 10.8.3 |
| Apple | Mac Os X | 10.8.4 |
| Apple | Mac Os X | 10.8.5 |
| Apple | Mac Os X | 10.9 |
| Apple | Mac Os X | 10.9.1 |
| Apple | Mac Os X | 10.9.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-1372?
How severe is CVE-2014-1372?
How do I fix CVE-2014-1372?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-1366WebKit, as used in Apple iOS before 7.1.2, Apple Safari befo…
- CVE-2014-1367WebKit, as used in Apple iOS before 7.1.2, Apple Safari befo…
- CVE-2014-1368WebKit, as used in Apple iOS before 7.1.2, Apple Safari befo…
- CVE-2014-1369WebKit in Apple Safari before 6.1.5 and 7.x before 7.0.5 all…
- CVE-2014-1370The byte-swapping implementation in copyfile in Apple OS X b…
- CVE-2014-1371Array index error in Dock in Apple OS X before 10.9.4 allows…
- CVE-2014-1373Intel Graphics Driver in Apple OS X before 10.9.4 does not p…
- CVE-2014-1374Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2014-1375Intel Graphics Driver in Apple OS X before 10.9.4 allows loc…
- CVE-2014-1376Intel Compute in Apple OS X before 10.9.4 does not properly …
- CVE-2014-1377Array index error in IOAcceleratorFamily in Apple OS X befor…
- CVE-2014-1378IOGraphicsFamily in Apple OS X before 10.9.4 allows local us…
Are you affected by CVE-2014-1372?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST