PT-2024-22066 · Apple · Apple Macos

Amir Bazine + 3 · Published 2024-05-13 · Updated 2024-12-09 · CVE-2024-27829

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.5

Description The issue was addressed with improved memory handling. Processing a file may lead to unexpected app termination or arbitrary code execution.

Recommendations For versions prior to 14.5, update to macOS Sonoma 14.5 to resolve the issue. As a temporary workaround, consider avoiding the processing of files that may trigger the unexpected app termination or arbitrary code execution until the update is applied.

Fix

Access of Memory Location After End of Buffer

Weakness Enumeration

CWE-788

Related Identifiers

CVE-2024-27829

ZDI-24-1120

ZDI-24-1121

ZDI-24-1122

ZDI-24-965

Affected Products

Apple Macos

References · 14

• https://osv.dev/vulnerability/CVE-2024-27829 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-24-1121 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-27829 · Security Note
• https://support.apple.com/en-us/HT214106 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-24-1120 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-965 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-1122 · Security Note
• https://support.apple.com/kb/HT214106 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/707920 · Security Note
• https://t.me/cvenotify/103619 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-27829 · Note
• https://twitter.com/TheZDIBugs/status/1823080450832630176 · Twitter Post
• http://seclists.org/fulldisclosure/2024/May/12 · Note
• https://support.apple.com/en-us/120903 · Note