PT-2025-3055 · Apple · Ipados+3

Smi1Esec · Published 2024-12-11 · Updated 2025-04-04 · CVE-2024-54550

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2

Description The issue is related to the incorrect authorization of the Contact Information Handler component in the operating systems, potentially allowing an app to view autocompleted contact information from Messages and Mail in system logs. This could enable an attacker to gain unauthorized access to protected information.

Recommendations For macOS Sequoia versions prior to 15.2, update to macOS Sequoia 15.2 to resolve the issue. For iOS versions prior to 18.2, update to iOS 18.2 to resolve the issue. For iPadOS versions prior to 18.2, update to iPadOS 18.2 to resolve the issue.

Fix

Incorrect Authorization

Information Disclosure

Weakness Enumeration

CWE-863

CWE-200

Related Identifiers

BDU:2025-01376

CVE-2024-54550

Affected Products

Apple Macos

Ios

Ipados

Macos Sequoia

References · 8

• https://bdu.fstec.ru/vul/2025-01376 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-54550 · Security Note
• https://support.apple.com/en-us/121839 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-54550 · Vendor Advisory
• https://support.apple.com/en-us/121837 · Vendor Advisory
• https://t.me/cvenotify/117855 · Telegram Post
• https://twitter.com/CVEnew/status/1884008881447395752 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54550 · Note