CVE-2014-4448

Published: Oct 22, 2014Modified: May 6, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

House Arrest in Apple iOS before 8.1 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to obtain sensitive information from a Documents directory by obtaining this UID.

Affected (1)

Products: Apple: Iphone Os

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Up to 8.0.2

Related CWEs

References (10)

http://www.securityfocus.com/archive/1/533747

Source: product-security@apple.com

http://www.securityfocus.com/bid/70661

Source: product-security@apple.com

http://www.securitytracker.com/id/1031077

Source: product-security@apple.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/97664

Source: product-security@apple.com

https://support.apple.com/kb/HT6541

Source: product-security@apple.com

Vendor Advisory

http://www.securityfocus.com/archive/1/533747

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/70661

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1031077

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/97664

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT6541

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.