CVE-2024-44126

Опубликовано: 28 окт. 2024

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.1, macOS Sequoia 15, iOS 17.7 and iPadOS 17.7, macOS Sonoma 14.7, visionOS 2, iOS 18 and iPadOS 18. Processing a maliciously crafted file may lead to heap corruption.

Ссылки

https://support.apple.com/en-us/121238
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121246
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121247
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121249
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121250
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121568
Release Notes
Vendor Advisory
http://seclists.org/fulldisclosure/2024/Oct/13

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 17.7 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 17.7 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 13.7.1 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.7 (исключая)

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

Версия до 2.0 (исключая)

EPSS

Процентиль: 5%

0.00022

Низкий

7.8 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

GHSA-x5jw-x6xm-xcgh