PT-2025-10620 · Apple · Ipados+3

Csaba Fitzl + 1 · Published 2024-09-16 · Updated 2025-03-11 · CVE-2024-54469

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.7 macOS versions prior to 14.7 macOS version 15 and later are not affected, but versions prior to 15 are affected by this issue in earlier versions, the issue is fixed in version 15 The correct interpretation is: macOS versions prior to 13.7 macOS versions 14.0 through 14.6 macOS Sonoma version 14.7 and later are not affected The issue is fixed in macOS Ventura 13.7 and later, and in macOS Sonoma 14.7 and later, and in macOS Sequoia 15 and later The correct interpretation is: macOS versions prior to 13.7 macOS versions 14.0 through 14.6 The issue is fixed in macOS versions 13.7 and later, and in macOS versions 14.7 and later The issue is fixed in visionOS version 2 and later The issue is fixed in iOS version 18 and later The issue is fixed in iPadOS version 18 and later macOS versions prior to 13.7 macOS versions 14.0 through 14.6 visionOS versions prior to 2 iOS versions prior to 18 iPadOS versions prior to 18

Description A local user may be able to leak sensitive user information due to inadequate checks. The issue was addressed with improved checks.

Recommendations For macOS versions prior to 13.7, update to macOS Ventura 13.7 or later. For macOS versions 14.0 through 14.6, update to macOS Sonoma 14.7 or later. For visionOS versions prior to 2, update to visionOS 2 or later. For iOS versions prior to 18, update to iOS 18 or later. For iPadOS versions prior to 18, update to iPadOS 18 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-02522

CVE-2024-54469

Affected Products

Apple Macos

Ios

Ipados

Visionos

References · 13

• https://support.apple.com/en-us/121250 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02522 · Security Note
• https://osv.dev/vulnerability/CVE-2024-54469 · Vendor Advisory
• https://support.apple.com/en-us/121238 · Vendor Advisory
• https://support.apple.com/en-us/121249 · Vendor Advisory
• https://support.apple.com/en-us/121247 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-54469 · Security Note
• https://support.apple.com/en-us/121234 · Vendor Advisory
• https://t.me/cvenotify/114225 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2024091707 · Note
• https://t.me/cvetracker/18827 · Telegram Post
• https://twitter.com/CVEnew/status/1899179882677965220 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54469 · Note