CVE-2014-1372: Apple Mac OS X

Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Graphics Driver in Apple OS X before 10.9.4 does not properly restrict read operations during processing of an unspecified system call, which allows local users to obtain sensitive information from kernel memory and bypass the ASLR protection mechanism via a crafted call.

Affected products

• Apple Mac OS X: up to and including 10.9.3; version 10.8.0 only; version 10.8.1 only; version 10.8.2 only; version 10.8.3 only; version 10.8.4 only; …

Published 2014-07-01. Last modified 2026-06-17.