CVEvulnerability
CVE-2024-44242
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2024-12-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-787
Description
The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware.
Affected configurations
• apple ipados (< 18.1)
• apple iphone os (< 18.1)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://support.apple.com/en-us/121563 Vendor Advisory
- https://support.apple.com/en-us/121564 support.apple.com