CVEvulnerability
CVE-2024-44277
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-10-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.7 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
- Weaknesses
- CWE-787
Description
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, tvOS 18.1, visionOS 2.1. An app may be able to cause unexpected system termination or corrupt kernel memory.
Affected configurations
• apple ipados (< 18.1)
• apple iphone os (< 18.1)
• apple tvos (< 18.1)
• apple visionos (< 2.1)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://support.apple.com/en-us/121563 Vendor Advisory
- https://support.apple.com/en-us/121564 support.apple.com
- https://support.apple.com/en-us/121566 Vendor Advisory
- https://support.apple.com/en-us/121569 Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Oct/11 seclists.org
- http://seclists.org/fulldisclosure/2024/Oct/15 seclists.org
- http://seclists.org/fulldisclosure/2024/Oct/16 seclists.org
- http://seclists.org/fulldisclosure/2024/Oct/9 seclists.org