PT-2022-7519 · Apple+7 · Ios+13
Manfp
+1
·
Published
2022-08-18
·
Updated
2026-02-13
·
CVE-2024-27834
CVSS v3.1
8.1
High
| Vector | AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Apple Safari
iOS 17.5 and iPadOS 17.5, tvOS 17.5, watchOS 10.5, macOS Sonoma 14.5
WebKitGTK
versions prior to 2.44.2
WebKit2GTK
versions prior to 2.44.2
Description
This issue addresses a vulnerability where an attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. The vulnerability affects Apple Safari, WebKitGTK, and WPE WebKit. Multiple reports indicate that this flaw could lead to code execution. The issue has been addressed with improved checks in versions iOS 17.5 and iPadOS 17.5, tvOS 17.5, Safari 17.5, watchOS 10.5, macOS Sonoma 14.5, and WebKitGTK versions 2.44.2 and later.
Recommendations
Update Apple Safari to iOS 17.5 and iPadOS 17.5, tvOS 17.5, watchOS 10.5, or macOS Sonoma 14.5.
Update WebKitGTK to version 2.44.2 or later.
Update WPE WebKit to version 2.44.2 or later.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Centos
Debian
Linuxmint
Apple Macos
Red Hat
Safari
Suse
Ubuntu
Ios
Ipados
Macos Sonoma
Tvos
Watchos