CVE-2014-9862

HIGH · CVSS 7.8 EPSS 6.76%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-07-22 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2014-9862

Severity

HIGH

CVSS

7.8

EPSS

6.76%

Original Filing — NVD Description

Integer signedness error in bspatch.c in bspatch in bsdiff, as used in Apple OS X before 10.11.6 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted patch file.