CVE-2024-27841

Опубликовано: 14 мая 2024

Источник: nvd

CVSS3: 5.5

CVSS3: 9.8

EPSS Низкий

Описание

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An app may be able to disclose kernel memory.

Ссылки

http://seclists.org/fulldisclosure/2024/May/10
Mailing List
Vendor Advisory
http://seclists.org/fulldisclosure/2024/May/12
Mailing List
https://support.apple.com/en-us/HT214101
Vendor Advisory
https://support.apple.com/en-us/HT214106
Vendor Advisory
https://support.apple.com/kb/HT214101
Vendor Advisory
https://support.apple.com/kb/HT214106
Vendor Advisory
http://seclists.org/fulldisclosure/2024/May/10
Mailing List
Vendor Advisory
http://seclists.org/fulldisclosure/2024/May/12
Mailing List
https://support.apple.com/en-us/HT214101
Vendor Advisory
https://support.apple.com/en-us/HT214106
Vendor Advisory
https://support.apple.com/kb/HT214101
Vendor Advisory
https://support.apple.com/kb/HT214106
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 17.5 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 17.5 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.5 (исключая)

EPSS

Процентиль: 38%

0.00167

Низкий

5.5 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-284

Связанные уязвимости

GHSA-hw9f-66ch-w6pg

CVSS3: 9.8

github

больше 1 года назад

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An app may be able to disclose kernel memory.

EPSS

Процентиль: 38%

0.00167

Низкий

5.5 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-284