CVEvulnerability
CVE-2024-54478
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-01-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-125
Description
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.4, macOS Sequoia 15.2, macOS Sonoma 14.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Affected configurations
• apple ipados (< 17.7.4)
• apple ipados (>= 18.0 < 18.2)
• apple iphone os (< 18.2)
• apple macos (< 14.7.2)
• apple macos (>= 15.0 < 15.2)
• apple tvos (< 18.2)
• apple visionos (< 2.2)
• apple watchos (<= 11.2)
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://support.apple.com/en-us/121837 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121839 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121840 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121843 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121844 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121845 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122067 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Jan/14 seclists.org