CVE-2014-4377

Integer overflow in CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

6.95% chance of exploitation in the next 30 days, 94th percentile

Published

2014-09-18

Updated

2024-08-06

Proof-of-concept exploits (2)

• davidmurray/CVE-2014-43771★ · 2014-10-11
• feliam/CVE-2014-437773★ · 2014-10-15

References

• CVE Record
• NVD entry

Related

• CVE-2013-2729
• CVE-2013-2730
• CVE-2014-4378
• CVE-2014-4481
• CVE-2014-4338
• CVE-2014-4337