CVE-2015-7035

High

Published: 23/10/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Apple Mac EFI before version 2015-002, used in OS X before 10.11.1 and other products, mishandles arguments, allowing attackers to access 'unused' functions via unspecified vectors.

Risk Assessment

This vulnerability may allow attackers to exploit undocumented functions, potentially leading to unauthorized access or execution of malicious code.

Recommendation

It is recommended to update the system to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.

Other vulnerabilities in Apple Mac EFI

CVE-2015-3693High
Earlier versions of Apple Mac EFI before 2015-001, used in OS X before 10.10.4, do not properly set refresh rates for DDR3 RAM. This may make it easier for remote attackers to conduct row-hammer attacks, potentially leading to privilege escalation or denial of service (memory corruption).

Original NVD description (English source)

Apple Mac EFI before 2015-002, as used in OS X before 10.11.1 and other products, mishandles arguments, which allows attackers to reach "unused" functions via unspecified vectors.