Memory Corruption Flaw in Apple Devices
CVE-2024-54523
5.8MEDIUM
Key Information:
- Vendor
- Apple
- Vendor
- CVE Published:
- 27 January 2025
Summary
This vulnerability arises from improper bounds checks, which allows applications to potentially corrupt the memory allocated to the coprocessor. If exploited, this could lead to unpredictable behavior in affected systems. Apple has addressed this issue with updates in their latest operating systems, including macOS Sequoia 15.2, iOS 18.2, watchOS 11.2, tvOS 18.2, and iPadOS 18.2, urging users to update promptly to mitigate risks.
Affected Version(s)
iOS and iPadOS < 18.2
macOS < 15.2
tvOS < 18.2
References
CVSS V3.1
Score:
5.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved