CVE-2014-4448: Apple iPhone OS

Low severity, CVSS 1.9. EPSS: 0.2% chance of exploitation in the next 30 days.

House Arrest in Apple iOS before 8.1 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to obtain sensitive information from a Documents directory by obtaining this UID.

Affected products

• Apple iPhone OS: up to and including 8.0.2

Published 2014-10-22. Last modified 2026-06-17.