VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 18, 2015· Updated Jun 17, 2026

CVE-2014-8611

CVE-2014-8611

Description

The __sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS before 9 mishandles failures of the write system call, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Apple Inc./Iphone OS
    cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: <=8.4.1
  • Apple Inc./Mac OS X
    cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
    Range: <=10.10.5
  • FreeBSD/FreeBSD2 versions
    cpe:2.3:o:freebsd:freebsd:10.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:freebsd:freebsd:10.1:*:*:*:*:*:*:*
    • (no CPE)range: =10.1
  • Apple Inc./iOSllm-fuzzy
    Range: <9

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.