Memory Handling Vulnerability in Apple iOS and iPadOS Products
CVE-2024-44277

7.8HIGH

Key Information:

Vendor

Apple

Vendor
CVE Published:
28 October 2024

What is CVE-2024-44277?

The vulnerability arises from inadequate memory handling within certain Apple operating systems, potentially allowing malicious applications to exploit system resources. This exploitation may lead to unexpected termination of the system or corruption of kernel memory, compromising overall device stability. Apple has addressed this issue in iOS 18.1, iPadOS 18.1, visionOS 2.1, and tvOS 18.1, ensuring improved memory management to mitigate these risks.

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.