Out-of-Bounds Write Vulnerability in Apple macOS Products
CVE-2024-54509

7.8HIGH

Key Information:

Vendor
Apple
Status
Mac OS
Vendor
CVE Published:
27 January 2025

Summary

An out-of-bounds write vulnerability was identified in Apple macOS products, allowing an application to potentially cause an unexpected termination of the system or modify critical kernel memory. The issue has been addressed through improved input validation in the latest versions of macOS Sonoma and macOS Sequoia, ensuring better protection against potential exploits.

Affected Version(s)

macOS < 14.7

macOS < 15.2

References

https://support.apple.com/en-us/122069
https://support.apple.com/en-us/121839
https://support.apple.com/en-us/121840

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.