CVE-2014-1355

CVE-2014-1355 describes a denial-of-service vulnerability in the IOKit implementation within the kernel of Apple iOS before 7.1.2, Apple TV before 6.1.2, and IOReporting in Apple OS X before 10.9.4. This flaw allows a local attacker to trigger a NULL pointer dereference and system reboot by providing specially crafted API arguments. The vulnerability has a CVSS score of 4.9, indicating a medium severity. It requires local access (AV:L) and has low attack complexity (AC:L), with no authentication needed (Au:N). The primary impact is a complete denial of service (A:C) without affecting confidentiality or integrity. There is no evidence of active exploitation, and no public exploit code is available via Metasploit, Nuclei, or ExploitDB. The CVE has received minimal community discussion and media coverage, suggesting low public attention.