PT-2024-1775 · Apple · Apple Macos

Ian De Marcellus + 2 · Published 2024-01-22 · Updated 2024-01-26 · CVE-2024-23209

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.3

Description The issue is related to a buffer overflow in the LLVM component of the macOS operating system, which can lead to arbitrary code execution when processing web content. This can be exploited by a remote attacker.

Recommendations For versions prior to 14.3, update to macOS Sonoma 14.3 to fix the issue with improved memory handling.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2024-01505

CVE-2024-23209

Affected Products

Apple Macos

References · 10

• https://bdu.fstec.ru/vul/2024-01505 · Security Note
• https://support.apple.com/en-us/HT214061 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-23209 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/704070 · Security Note
• https://osv.dev/vulnerability/CVE-2024-23209 · Vendor Advisory
• http://seclists.org/fulldisclosure/2024/Jan/36 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23209 · Note
• https://twitter.com/CVEnew/status/1749599886012526709 · Twitter Post
• https://support.apple.com/en-us/120309 · Note
• https://support.apple.com/kb/HT214061 · Note