CVE-2015-1136

Vulnerability

A use-after-free vulnerability exists in the CoreAnimation framework of Apple OS X Yosemite versions v10.10 through v10.10.2. The flaw arises from improper use of a mutex, leading to a use-after-free condition when processing certain inputs. This allows an attacker to corrupt memory and potentially execute arbitrary code.

Exploitation

An attacker can exploit this vulnerability remotely by delivering crafted content (e.g., via a web page or email) that triggers the use-after-free in CoreAnimation. No authentication is required; the attacker only needs to convince the user to open the malicious content. The improper mutex handling creates a race window that can be leveraged to access freed memory.

Impact

Successful exploitation grants the attacker arbitrary code execution in the context of the affected user. This can lead to full system compromise, including data theft, installation of malware, or further privilege escalation.

Mitigation

Apple addressed this issue in OS X Yosemite v10.10.3, released on April 8, 2015 [1]. Users should update via Software Update or download the standalone update. No workarounds are available for unpatched systems. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog.