CVEvulnerability
CVE-2024-27802
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-06-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-125, CWE-787
Description
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
Affected configurations
• apple ipados (< 16.7.8)
• apple ipados (>= 17.0 < 17.5)
• apple iphone os (< 16.7.8)
• apple iphone os (>= 17.0 < 17.5)
• apple macos (< 12.7.5)
• apple macos (>= 13.0 < 13.6.7)
• apple macos (>= 14.0 < 14.5)
• apple tvos (< 17.5)
• apple visionos (< 1.2)
Related
References
- https://support.apple.com/en-us/120898 support.apple.com
- https://support.apple.com/en-us/120899 support.apple.com
- https://support.apple.com/en-us/120900 support.apple.com
- https://support.apple.com/en-us/120901 support.apple.com
- https://support.apple.com/en-us/120903 support.apple.com
- https://support.apple.com/en-us/120905 support.apple.com
- https://support.apple.com/en-us/120906 support.apple.com
- http://seclists.org/fulldisclosure/2024/Jun/5 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT214100 Vendor Advisory
- https://support.apple.com/en-us/HT214101 Vendor Advisory
- https://support.apple.com/en-us/HT214102 Vendor Advisory
- https://support.apple.com/en-us/HT214105 Vendor Advisory
- https://support.apple.com/en-us/HT214106 Vendor Advisory
- https://support.apple.com/en-us/HT214107 Vendor Advisory
- https://support.apple.com/en-us/HT214108 Vendor Advisory
- https://support.apple.com/kb/HT214100 Vendor Advisory
- https://support.apple.com/kb/HT214101 Vendor Advisory
- https://support.apple.com/kb/HT214102 Vendor Advisory
- https://support.apple.com/kb/HT214105 Vendor Advisory
- https://support.apple.com/kb/HT214106 Vendor Advisory
- https://support.apple.com/kb/HT214107 Vendor Advisory
- https://support.apple.com/kb/HT214108 Vendor Advisory