CVE-2024-44245

EPSS 0.04%
Published 12.12.2024 02:15:24
Last modified 20.12.2024 19:15:07
Source product-security@apple.com
Teams watchlist Login
Open Login

The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3, visionOS 2.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, macOS Sonoma 14.7.2. An app may be able to cause unexpected system termination or corrupt kernel memory.

Affected products Warnungen 0 Metrics 3 CWE 1 References 8

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ iPadOS Version < 17.7.3

Apple ≫ iPadOS Version >= 18.0 < 18.2

Apple ≫ iPhone OS Version >= 18.0 < 18.2

Apple ≫ macOS Version >= 14.0 < 14.7.2

Apple ≫ macOS Version >= 15.0 < 15.2

Apple ≫ visionOS Version < 2.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.04%	0.111

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.1	1.8	5.2	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.1	1.8	5.2	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://support.apple.com/en-us/121838

Vendor Advisory

https://support.apple.com/en-us/121840

Vendor Advisory

https://support.apple.com/en-us/121839

Vendor Advisory

https://support.apple.com/en-us/121837

Vendor Advisory

https://support.apple.com/en-us/121845

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-44245

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-44245

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-44245

EUVD