The IOUSBControllerUserClient::ReadRegister function in the IOUSB controller in IOUSBFamily in Apple OS X before 10.10.2 allows local users to read data from arbitrary kernel-memory locations by leveraging root access and providing a crafted first argument.
| Software | From | Fixed in |
|---|---|---|
| apple / mac_os_x | - | 10.10.1.x |