CVE-2024-27818

Опубликовано: 14 мая 2024

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An attacker may be able to cause unexpected app termination or arbitrary code execution.

Ссылки

http://seclists.org/fulldisclosure/2024/May/10
Mailing List
http://seclists.org/fulldisclosure/2024/May/12
Mailing List
https://support.apple.com/en-us/HT214101
Vendor Advisory
https://support.apple.com/en-us/HT214106
Vendor Advisory
https://support.apple.com/kb/HT214100
Vendor Advisory
https://support.apple.com/kb/HT214101
Vendor Advisory
https://support.apple.com/kb/HT214106
Vendor Advisory
http://seclists.org/fulldisclosure/2024/May/10
Mailing List
http://seclists.org/fulldisclosure/2024/May/12
Mailing List
https://support.apple.com/en-us/HT214101
Vendor Advisory
https://support.apple.com/en-us/HT214106
Vendor Advisory
https://support.apple.com/kb/HT214100
Vendor Advisory
https://support.apple.com/kb/HT214101
Vendor Advisory
https://support.apple.com/kb/HT214106
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 16.7.8 (исключая)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия от 17.0 (включая) до 17.5 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 16.7.8 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия от 17.0 (включая) до 17.5 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.5 (исключая)

EPSS

Процентиль: 20%

0.00063

Низкий

7.8 High

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-77

Связанные уязвимости

GHSA-3xmr-5wwh-fr8m