Apple Type Services (ATS) in Apple OS X before 10.9.2... · CVE-2014-1255 · GitHub Advisory Database · GitHub

Apple Type Services (ATS) in Apple OS X before 10.9.2...

High severity Unreviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Jan 28, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Apple Type Services (ATS) in Apple OS X before 10.9.2 does not properly validate calls to the free function, which allows attackers to bypass the App Sandbox protection mechanism via crafted Mach messages.

References

Published by the National Vulnerability Database

Feb 27, 2014

Published to the GitHub Advisory Database May 17, 2022

Last updated Jan 28, 2023