CVE-2024-44240medium

CVE-2024-44240

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.5%

probabilidade de exploração

0.5%top 57% das CVEs

exploração observada

nãonenhuma fonte reporta

The issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Processing a maliciously crafted font may result in the disclosure of process memory.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Produtos afetados

Apple · iOS and iPadOS Apple · macOS Apple · tvOS Apple · visionOS Apple · watchOS

Referências

http://seclists.org/fulldisclosure/2024/Oct/10 http://seclists.org/fulldisclosure/2024/Oct/11 http://seclists.org/fulldisclosure/2024/Oct/12 http://seclists.org/fulldisclosure/2024/Oct/13 http://seclists.org/fulldisclosure/2024/Oct/15 http://seclists.org/fulldisclosure/2024/Oct/16 https://support.apple.com/en-us/121563 https://support.apple.com/en-us/121564 https://support.apple.com/en-us/121565 https://support.apple.com/en-us/121566 https://support.apple.com/en-us/121567 https://support.apple.com/en-us/121568