CVE-2014-4371

The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4419, CVE-2014-4420, and CVE-2014-4421.

• CWE-665

• http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.htmlThird Party Advisory
• http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.htmlThird Party Advisory
• http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.htmlThird Party Advisory
• http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.htmlMailing List, Vendor Advisory
• http://support.apple.com/HT204244Vendor Advisory
• http://support.apple.com/kb/HT6441Vendor Advisory
• http://support.apple.com/kb/HT6442Vendor Advisory
• http://www.securityfocus.com/bid/69882Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/69919Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030866Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96100VDB Entry
• https://support.apple.com/kb/HT6535Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.htmlThird Party Advisory
• http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.htmlThird Party Advisory
• http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.htmlThird Party Advisory
• http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.htmlMailing List, Vendor Advisory
• http://support.apple.com/HT204244Vendor Advisory
• http://support.apple.com/kb/HT6441Vendor Advisory
• http://support.apple.com/kb/HT6442Vendor Advisory
• http://www.securityfocus.com/bid/69882Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/69919Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030866Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96100VDB Entry
• https://support.apple.com/kb/HT6535Vendor Advisory

Published

Sep 18, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4365Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-4366Mail in Apple iOS before 8 does not prevent sending a LOGIN …
• CVE-2014-4367Apple iOS before 8 enables Voice Dial during all upgrade act…
• CVE-2014-4368The Accessibility subsystem in Apple iOS before 8 allows att…
• CVE-2014-4369The IOAcceleratorFamily API implementation in Apple iOS befo…
• CVE-2014-4370Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-4372syslogd in the syslog subsystem in Apple iOS before 8 and Ap…
• CVE-2014-4373The IntelAccelerator driver in the IOAcceleratorFamily subsy…
• CVE-2014-4374NSXMLParser in Foundation in Apple iOS before 8 allows attac…
• CVE-2014-4375Double free vulnerability in Apple iOS before 8 and Apple TV…
• CVE-2014-4376IOKit in IOAcceleratorFamily in Apple OS X before 10.9.5 all…
• CVE-2014-4377Integer overflow in CoreGraphics in Apple iOS before 8 and A…