CVE-2024-23258

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.4, visionOS 1.1. Processing an image may lead to arbitrary code execution...

CVE-2024-23258

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.4, visionOS 1.1. Processing an image may lead to arbitrary code execution...

CVE-2024-23258

CVE-2024-23258 is associated with Apple’s ImageIO in visionOS 1.1 and macOS Sonoma 14.4. The issue is described as an out-of-bounds read that occurs during image processing and may lead to arbitrary code execution. The root cause is stated as insufficient input validation, and Apple’s fixes are i...

CVE-2024-23286

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing an image may lead to arbitrary code...

CVE-2024-23286

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing an image may lead to arbitrary code...

CVE-2024-23286

A buffer overflow vulnerability exists in the ImageIO component across multiple Apple operating systems, including iOS, iPadOS, tvOS, watchOS, macOS, and visionOS . The root cause is the execution of operations outside of the buffer in memory during image processing. Successful exploitation of th...

CVE-2024-23265

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to cause unexpected syste...

CVE-2024-23284

A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing maliciously crafted web content may prevent Content Security Policy from bei...

CVE-2024-23284

A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing maliciously crafted web content may prevent Content Security Policy from bei...

CVE-2024-23226

CVE-2024-23226 affects Apple OS stack and is about improper memory handling during processing of web content, leading to arbitrary code execution. Connected advisories corroborate the issue and note fixes in macOS Sonoma 14.4, visionOS 1.1, iOS 17.4, iPadOS 17.4, watchOS 10.4, and tvOS 17.4. The ...

CVE-2024-23246

This CVE-2024-23246 affects Apple platforms where sandbox escapes were possible in the affected components. According to the public description, the issue was addressed by removing the vulnerable code and is fixed in macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, and iOS...

CVE-2024-23246

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to break out of its sandbox...

CVE-2024-23220

The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.4 and iPadOS 17.4, visionOS 1.1. An app may be able to fingerprint the user...

CVE-2024-23220

The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.4 and iPadOS 17.4, visionOS 1.1. An app may be able to fingerprint the user...

CVE-2024-23220

The CVE-2024-23220 issue affects Apple visionOS, iOS, and iPadOS Safari related to fingerprinting the user due to an issue in cache handling. The vulnerability arises from the Safari component (on Apple Vision Pro platforms) where improper cache handling could allow an app to fingerprint the user...

CVE-2024-23295

A permissions issue was addressed to help ensure Personas are always protected. This issue is fixed in visionOS 1.1. An unauthenticated user may be able to use an unprotected Persona...

CVE-2024-23295

A permissions issue was addressed to help ensure Personas are always protected. This issue is fixed in visionOS 1.1. An unauthenticated user may be able to use an unprotected Persona...

CVE-2024-23295

The CVE-2024-23295 entry affects Apple visionOS (Apple Vision Pro) with a permissions issue that could allow an unauthenticated user to use an unprotected Persona. The issue is addressed in visionOS 1.1; upgrading to visionOS 1.1 is the documented remediation. The available sources confirm the vu...

CVE-2024-23284: Protection Mechanism Failure

A logic issue was addressed with improved state management. This issue is fixed in Safari 17.4, iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing maliciously crafted web content may prevent Content Security Policy from bei...

CVE-2024-23295: Incorrect Default Permissions

A permissions issue was addressed to help ensure Personas are always protected. This issue is fixed in visionOS 1.1. An unauthenticated user may be able to use an unprotected Persona...