Heap Corruption Vulnerability in Apple iOS and macOS Products
CVE-2024-44218

7.8HIGH

Key Information:

Vendor

Apple
Status
Mac OS
iOS And iPad OS
Vendor
CVE Published:
28 October 2024

What is CVE-2024-44218?

This vulnerability involves a heap corruption issue that occurs when processing a specially crafted file. Affected Apple products include iOS and iPadOS versions 17.7.1 and 18.1, as well as macOS Sonoma version 14.7.1. The flaw can potentially allow an attacker to manipulate memory, leading to unexpected behavior or crashes. Apple has addressed this vulnerability in the latest software updates through enhanced checks that mitigate the risk associated with this flaw.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

iOS and iPadOS < 17.7

iOS and iPadOS < 18.1

macOS < 14.7

References

https://support.apple.com/en-us/121570
https://support.apple.com/en-us/121567
https://support.apple.com/en-us/121563

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.