CVE-2024-44282mediumCWE-125

CVE-2024-44282

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.8%

probabilidade de exploração

0.8%top 45% das CVEs

exploração observada

nãonenhuma fonte reporta

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Parsing a file may lead to disclosure of user information.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Produtos afetados

Apple · iOS and iPadOS Apple · macOS Apple · tvOS Apple · visionOS Apple · watchOS

Referências

http://seclists.org/fulldisclosure/2024/Oct/10 http://seclists.org/fulldisclosure/2024/Oct/11 http://seclists.org/fulldisclosure/2024/Oct/12 http://seclists.org/fulldisclosure/2024/Oct/13 http://seclists.org/fulldisclosure/2024/Oct/16 http://seclists.org/fulldisclosure/2024/Oct/9 https://support.apple.com/en-us/121563 https://support.apple.com/en-us/121564 https://support.apple.com/en-us/121565 https://support.apple.com/en-us/121566 https://support.apple.com/en-us/121567 https://support.apple.com/en-us/121568