About Security Update 2014-002 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2013-6393n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2013-5170Buffer underflow in CoreGraphics in Apple Mac OS X before 10.9 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF document
• CVE-2013-4164n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2014-1322n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2014-1295n/a: Improper Authentication
• CVE-2014-1319Buffer overflow in ImageIO in Apple OS X 10.9.x through 10.9.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG image
• CVE-2014-1318The Intel Graphics Driver in Apple OS X through 10.9.2 does not properly validate a certain pointer, which allows attackers to execute arbitrary code via a crafted application
• CVE-2014-1314n/a: security vulnerability
• CVE-2014-1320n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2014-1316Heimdal, as used in Apple OS X through 10.9.2, allows remote attackers to cause a denial of service (abort and daemon exit) via ASN.1 data encountered in the Kerberos 5 protocol
• CVE-2014-1315n/a: Use of Externally-Controlled Format String
• CVE-2014-1321n/a: security vulnerability
• CVE-2014-1296n/a: security vulnerability

Source and provenance

Original title: About Security Update 2014-002 - Apple Support. Captured 17 Oct 2026, 20:01 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.