CVE-2024-44302

Опубликовано: 28 окт. 2024

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

The issue was addressed with improved checks. This issue is fixed in tvOS 18.1, iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, visionOS 2.1. Processing a maliciously crafted font may result in the disclosure of process memory.

Ссылки

https://support.apple.com/en-us/121563
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121565
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121566
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121567
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121568
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121569
Release Notes
Vendor Advisory
https://support.apple.com/en-us/121570
Release Notes
Vendor Advisory
http://seclists.org/fulldisclosure/2024/Oct/11
http://seclists.org/fulldisclosure/2024/Oct/12
http://seclists.org/fulldisclosure/2024/Oct/13
http://seclists.org/fulldisclosure/2024/Oct/16
http://seclists.org/fulldisclosure/2024/Oct/9

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 17.7.1 (исключая)

cpe:2.3:o:apple:ipados:18.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 17.7.1 (исключая)

cpe:2.3:o:apple:iphone_os:18.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 13.7.1 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.7.1 (исключая)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 18.1 (исключая)

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

Версия до 2.1 (исключая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 11.1 (исключая)

EPSS

Процентиль: 11%

0.00037

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-qvrv-r8xg-hh75