CVE-2024-44176

Опубликовано: 17 сент. 2024

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, tvOS 18. Processing an image may lead to a denial-of-service.

Ссылки

https://support.apple.com/en-us/121234
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121238
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121240
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121246
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121247
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121248
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121249
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121250
Release Notes
Vendor Advisory
http://seclists.org/fulldisclosure/2024/Sep/32
http://seclists.org/fulldisclosure/2024/Sep/33
http://seclists.org/fulldisclosure/2024/Sep/36
http://seclists.org/fulldisclosure/2024/Sep/40
http://seclists.org/fulldisclosure/2024/Sep/41

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 17.7 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 17.7 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 13.7 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.7 (исключая)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 18.0 (исключая)

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

Версия до 2.0 (исключая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 11.0 (исключая)

EPSS

Процентиль: 55%

0.00321

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-400

Связанные уязвимости

GHSA-fvmx-5p62-pxm8