CVEvulnerability
CVE-2024-27871
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-22
Description
A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. An app may be able to access protected user data.
Affected configurations
• apple ipados (< 17.6)
• apple iphone os (< 17.6)
• apple macos (< 14.6)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- https://support.apple.com/en-us/120909 support.apple.com
- https://support.apple.com/en-us/120911 support.apple.com
- http://seclists.org/fulldisclosure/2024/Jul/16 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/18 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT214117 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214119 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214117 support.apple.com
- https://support.apple.com/kb/HT214119 support.apple.com