CVE-2014-4492

libnetcore in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not verify that certain values have the expected data type, which allows attackers to execute arbitrary code in an _networkd context via a crafted XPC message from a sandboxed app, as demonstrated by lack of verification of the XPC dictionary data type.

• CWE-19

• http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html
• http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.htmlVendor Advisory
• http://packetstormsecurity.com/files/134393/Mac-OS-X-Networkd-XPC-Type-Confusion-Sandbox-Escape.html
• http://support.apple.com/HT204244Vendor Advisory
• http://support.apple.com/HT204245Vendor Advisory
• http://support.apple.com/HT204246Vendor Advisory
• http://www.exploit-db.com/exploits/35847Exploit
• http://www.osvdb.org/114862
• https://code.google.com/p/google-security-research/issues/detail?id=92Exploit
• http://lists.apple.com/archives/security-announce/2015/Jan/msg00000.html
• http://lists.apple.com/archives/security-announce/2015/Jan/msg00001.htmlVendor Advisory
• http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.htmlVendor Advisory
• http://packetstormsecurity.com/files/134393/Mac-OS-X-Networkd-XPC-Type-Confusion-Sandbox-Escape.html
• http://support.apple.com/HT204244Vendor Advisory
• http://support.apple.com/HT204245Vendor Advisory
• http://support.apple.com/HT204246Vendor Advisory
• http://www.exploit-db.com/exploits/35847Exploit
• http://www.osvdb.org/114862
• https://code.google.com/p/google-security-research/issues/detail?id=92Exploit

Published

Jan 30, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4486IOAcceleratorFamily in Apple iOS before 8.1.3, Apple OS X be…
• CVE-2014-4487Buffer overflow in IOHIDFamily in Apple iOS before 8.1.3, Ap…
• CVE-2014-4488IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.…
• CVE-2014-4489IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.…
• CVE-2014-4490Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-4491The extension APIs in the kernel in Apple iOS before 8.1.3, …
• CVE-2014-4493The app-installation functionality in MobileInstallation in …
• CVE-2014-4494Springboard in Apple iOS before 8.1.3 does not properly vali…
• CVE-2014-4495The kernel in Apple iOS before 8.1.3, Apple OS X before 10.1…
• CVE-2014-4496The mach_port_kobject interface in the kernel in Apple iOS b…
• CVE-2014-4497Integer signedness error in IOBluetoothFamily in the Bluetoo…
• CVE-2014-4498The CPU Software in Apple OS X before 10.10.2 allows physica…