PT-2024-2546 · Apple · Tvos+5
Xinru Chi
·
Published
2024-03-05
·
Updated
2026-05-04
·
CVE-2024-23225
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
iPadOS versions prior to 16.7.6
iOS versions prior to 16.7.6
macOS Monterey versions prior to 12.7.4
macOS Sonoma versions prior to 14.4
macOS Ventura versions prior to 13.6.5
tvOS versions prior to 17.4
visionOS versions prior to 1.1
watchOS versions prior to 10.4
Description
The issue is a memory corruption flaw present in the kernel, addressed through improved validation. Reports indicate potential exploitation of this issue in real-world scenarios. An attacker with arbitrary kernel read and write capabilities could bypass kernel memory protections. The vulnerability allows for potential bypass of kernel memory protections.
Recommendations
Update iPadOS to version 16.7.6 or later.
Update iOS to version 16.7.6 or later.
Update macOS Monterey to version 12.7.4 or later.
Update macOS Sonoma to version 14.4 or later.
Update macOS Ventura to version 13.6.5 or later.
Update tvOS to version 17.4 or later.
Update visionOS to version 1.1 or later.
Update watchOS to version 10.4 or later.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apple Macos
Ios
Ipados
Tvos
Visionos
Watchos