An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, tvOS 18. Processing a maliciously crafted file may lead to unexpected app termination.
References
Link | Resource |
---|---|
https://support.apple.com/en-us/121238 | Release Notes Vendor Advisory |
https://support.apple.com/en-us/121240 | Release Notes Vendor Advisory |
https://support.apple.com/en-us/121246 | Release Notes Vendor Advisory |
https://support.apple.com/en-us/121247 | Release Notes Vendor Advisory |
https://support.apple.com/en-us/121248 | Release Notes Vendor Advisory |
https://support.apple.com/en-us/121249 | Release Notes Vendor Advisory |
https://support.apple.com/en-us/121250 | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
24 Sep 2024, 16:34
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-125 | |
First Time |
Apple
Apple tvos Apple watchos Apple ipados Apple visionos Apple iphone Os Apple macos |
|
CPE | cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
References | () https://support.apple.com/en-us/121238 - Release Notes, Vendor Advisory | |
References | () https://support.apple.com/en-us/121240 - Release Notes, Vendor Advisory | |
References | () https://support.apple.com/en-us/121246 - Release Notes, Vendor Advisory | |
References | () https://support.apple.com/en-us/121247 - Release Notes, Vendor Advisory | |
References | () https://support.apple.com/en-us/121248 - Release Notes, Vendor Advisory | |
References | () https://support.apple.com/en-us/121249 - Release Notes, Vendor Advisory | |
References | () https://support.apple.com/en-us/121250 - Release Notes, Vendor Advisory |
20 Sep 2024, 12:31
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
17 Sep 2024, 00:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-09-17 00:15
Updated : 2024-09-24 16:34
NVD link : CVE-2024-27880
Mitre link : CVE-2024-27880
CVE.ORG link : CVE-2024-27880
JSON object : View
Products Affected
apple
- watchos
- ipados
- tvos
- iphone_os
- macos
- visionos
CWE
CWE-125
Out-of-bounds Read