IOHIDFamily in Apple iOS before 8.1.3 Apple OS X before 10.10.2 and Apple TV before 7.0.3 does not properly initialize event queues which allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app.