PT-2025-3035 · Apple · Macos Sequoia+2

Published 2024-12-11 · Updated 2025-01-29 · CVE-2024-54509

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS Sonoma versions prior to 14.7.2 macOS Sonoma versions prior to 14.7.3 macOS Sequoia versions prior to 15.2

Description An out-of-bounds write issue was addressed with improved input validation. This issue may allow an app to cause unexpected system termination or write kernel memory. The vulnerability is related to a buffer read out-of-bounds in memory, which can impact the confidentiality, integrity, and availability of protected information.

Recommendations For macOS Sonoma versions prior to 14.7.2, update to macOS Sonoma 14.7.2 or later. For macOS Sonoma versions prior to 14.7.3, update to macOS Sonoma 14.7.3 or later. For macOS Sequoia versions prior to 15.2, update to macOS Sequoia 15.2 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2025-01496

CVE-2024-54509

Affected Products

Apple Macos

Macos Sequoia

Macos Sonoma

References · 10

• https://bdu.fstec.ru/vul/2025-01496 · Security Note
• https://osv.dev/vulnerability/CVE-2024-54509 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-54509 · Security Note
• https://twitter.com/CVEnew/status/1884008861193130425 · Twitter Post
• https://support.apple.com/en-us/121840 · Note
• http://seclists.org/fulldisclosure/2025/Jan/16 · Note
• https://reddit.com/r/k12cybersecurity/comments/1ictyj0/msisac_cybersecurity_advisory_multiple · Reddit Post
• https://support.apple.com/en-us/122069 · Note
• https://support.apple.com/en-us/121839 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54509 · Note