An unspecified IOHIDFamily function in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking to prevent reading of kernel pointers, which allows attackers to bypass the ASLR protection mechanism via a crafted application.
https://exchange.xforce.ibmcloud.com/vulnerabilities/96080
http://www.securitytracker.com/id/1030866
http://www.securityfocus.com/bid/69921
http://www.securityfocus.com/bid/69882
http://support.apple.com/kb/HT6443
http://support.apple.com/kb/HT6442
http://support.apple.com/kb/HT6441
http://archives.neohapsis.com/archives/bugtraq/2014-09/0107.html
http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html