Kernel code execution via unchecked buffer bounds

Kernel buffer overflow in Apple iOS, iPadOS, and tvOS before 14.5 and watchOS before 7.4 allows local users to execute kernel code. The Kernel component inadequately checks bounds while processing data supplied through a malicious application, allowing data to overflow a buffer; Apple has not identified the specific function or buffer. Execution of a malicious local application is required, and successful exploitation grants arbitrary code execution with kernel privileges.