CVEvulnerability
CVE-2024-27833
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-06-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-190
Description
An integer overflow was addressed with improved input validation. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, tvOS 17.5, visionOS 1.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected configurations
• apple safari (< 17.5)
• apple ipados (< 16.7.8)
• apple ipados (>= 17.0 < 17.5)
• apple iphone os (< 16.7.8)
• apple iphone os (>= 17.0 < 17.5)
• apple tvos (< 17.5)
• apple visionos (< 1.2)
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- https://support.apple.com/en-us/120896 support.apple.com
- https://support.apple.com/en-us/120898 support.apple.com
- https://support.apple.com/en-us/120901 support.apple.com
- https://support.apple.com/en-us/120905 support.apple.com
- https://support.apple.com/en-us/120906 support.apple.com
- http://seclists.org/fulldisclosure/2024/Jun/5 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT214100 Vendor Advisory
- https://support.apple.com/en-us/HT214101 Vendor Advisory
- https://support.apple.com/en-us/HT214102 Vendor Advisory
- https://support.apple.com/en-us/HT214103 Vendor Advisory
- https://support.apple.com/en-us/HT214108 Vendor Advisory
- https://support.apple.com/kb/HT214100 support.apple.com
- https://support.apple.com/kb/HT214102 support.apple.com
- https://support.apple.com/kb/HT214103 support.apple.com
- https://support.apple.com/kb/HT214108 support.apple.com