T
he issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An attacker may be able to cause unexpected app termination or arbitrary code execution.
References
| Link | Resource |
|---|---|
| http://seclists.org/fulldisclosure/2024/May/10 | Mailing List |
| http://seclists.org/fulldisclosure/2024/May/12 | Mailing List |
| https://support.apple.com/en-us/HT214101 | Vendor Advisory |
| https://support.apple.com/en-us/HT214106 | Vendor Advisory |
| https://support.apple.com/kb/HT214100 | Vendor Advisory |
| https://support.apple.com/kb/HT214101 | Vendor Advisory |
| https://support.apple.com/kb/HT214106 | Vendor Advisory |
| http://seclists.org/fulldisclosure/2024/May/10 | Mailing List |
| http://seclists.org/fulldisclosure/2024/May/12 | Mailing List |
| https://support.apple.com/en-us/HT214101 | Vendor Advisory |
| https://support.apple.com/en-us/HT214106 | Vendor Advisory |
| https://support.apple.com/kb/HT214100 | Vendor Advisory |
| https://support.apple.com/kb/HT214101 | Vendor Advisory |
| https://support.apple.com/kb/HT214106 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
26 Mar 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-77 |
12 Dec 2024, 14:33
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| References | () http://seclists.org/fulldisclosure/2024/May/10 - Mailing List | |
| References | () http://seclists.org/fulldisclosure/2024/May/12 - Mailing List | |
| References | () https://support.apple.com/en-us/HT214101 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/HT214106 - Vendor Advisory | |
| References | () https://support.apple.com/kb/HT214100 - Vendor Advisory | |
| References | () https://support.apple.com/kb/HT214101 - Vendor Advisory | |
| References | () https://support.apple.com/kb/HT214106 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| First Time |
Apple macos
Apple ipados Apple iphone Os Apple |
|
| CPE | cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
21 Nov 2024, 09:05
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://seclists.org/fulldisclosure/2024/May/10 - | |
| References | () http://seclists.org/fulldisclosure/2024/May/12 - | |
| References | () https://support.apple.com/en-us/HT214101 - | |
| References | () https://support.apple.com/en-us/HT214106 - | |
| References | () https://support.apple.com/kb/HT214100 - | |
| References | () https://support.apple.com/kb/HT214101 - | |
| References | () https://support.apple.com/kb/HT214106 - |
11 Jun 2024, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| Summary |
|
14 May 2024, 15:13
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-14 15:13
Updated : 2025-03-26 20:15
NVD link : CVE-2024-27818
Mitre link : CVE-2024-27818
CVE.ORG link : CVE-2024-27818
JSON object : View
CWE
NVD-CWE-noinfo
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')