PT-2024-2550 · Apple · Ipados+3

Lyra Rebane

+1

·

Published

2024-03-05

·

Updated

2026-03-04

·

CVE-2024-23296

CVSS v3.1
7.8
VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions iPadOS versions prior to 17.4 iOS versions prior to 17.4 macOS versions prior to 13.6.7 watchOS (affected versions not specified) visionOS (affected versions not specified) iOS 16.7.8 tvOS (affected versions not specified)
Description The issue is a memory corruption problem addressed with improved validation. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of reports indicating that this issue may have been actively exploited. The vulnerability involves a buffer overflow in memory. The affected products include iPadOS, tvOS, iOS, watchOS, macOS, and visionOS.
Recommendations Update iPadOS to version 17.4 or later. Update iOS to version 17.4 or later. Update macOS to version 13.6.7 or later. Update iOS to version 16.7.8.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2024-02552
CVE-2024-23296

Affected Products

Apple Macos
Ios
Ipados
Macos Ventura