CVE-2015-1095

Vulnerability

The vulnerability resides in the IOHIDFamily component of Apple iOS (before 8.3), OS X (before 10.10.3), and Apple TV (before 7.2). It is triggered by a crafted HID (Human Interface Device) that causes memory corruption. No special configuration is required beyond physical proximity to connect the device. Affected versions: iOS before 8.3 [1], OS X before 10.10.3 [2], and Apple TV before 7.2 [3].

Exploitation

An attacker must be physically proximate to the target device and able to connect a malicious HID device (e.g., via USB or Bluetooth). The attacker crafts the HID device to send malformed input that exploits the memory corruption in IOHIDFamily. No authentication or user interaction is needed beyond the device being powered on and accepting HID connections.

Impact

Successful exploitation allows the attacker to execute arbitrary code with the privileges of the kernel (since IOHIDFamily runs in kernel space) or cause a denial of service via memory corruption. This could lead to full compromise of the device.

Mitigation

Apple addressed this issue in iOS 8.3 [1], OS X Yosemite 10.10.3 [2], and Apple TV 7.2 [3]. Users should update to these versions or later. No workaround is available; the fix is to apply the security updates.