CVE-2015-5774

Vulnerability

A buffer overflow vulnerability exists in the IOHIDFamily component of Apple iOS before 8.4.1 and OS X before 10.10.5. The issue can be triggered by local users via unspecified vectors, leading to memory corruption. Affected versions include iOS 8.4 and earlier, and OS X Yosemite 10.10.4 and earlier.

Exploitation

Exploitation requires local access to the system. The attacker must be able to execute code or interact with the IOHIDFamily subsystem. The exact exploitation steps are not disclosed, but the buffer overflow can be leveraged to gain elevated privileges.

Impact

Successful exploitation allows a local attacker to gain elevated privileges, potentially leading to full system compromise. The impact includes arbitrary code execution in the kernel context, enabling the attacker to bypass security restrictions.

Mitigation

Apple addressed this vulnerability in iOS 8.4.1 [2] and OS X Yosemite 10.10.5 [1]. Users should update to the latest versions. No workarounds are available.