PT-2025-3052 · Apple+7 · Ios+14
Gary Kwong
+1
·
Publicado
2024-12-11
·
Atualizado
2025-11-25
·
CVE-2024-54543
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
visionOS versions prior to 2.2
tvOS versions prior to 18.2
Safari versions prior to 18.2
watchOS versions prior to 11.2
iOS versions prior to 18.2
iPadOS versions prior to 18.2
macOS Sequoia versions prior to 15.2
Description
The issue is related to the processing of maliciously crafted web content, which may lead to memory corruption due to a buffer overflow in the Web Handler component. This can potentially allow a remote attacker to access confidential information. The problem was solved with improved memory handling.
Recommendations
For visionOS versions prior to 2.2, update to visionOS 2.2 or later.
For tvOS versions prior to 18.2, update to tvOS 18.2 or later.
For Safari versions prior to 18.2, update to Safari 18.2 or later.
For watchOS versions prior to 11.2, update to watchOS 11.2 or later.
For iOS versions prior to 18.2, update to iOS 18.2 or later.
For iPadOS versions prior to 18.2, update to iPadOS 18.2 or later.
For macOS Sequoia versions prior to 15.2, update to macOS Sequoia 15.2 or later.
Correção
Buffer Overflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Almalinux
Astra Linux
Centos
Debian
Apple Macos
Red Hat
Rocky Linux
Safari
Suse
Ios
Ipados
Macos Sequoia
Tvos
Visionos
Watchos