CVE-2024-23296

2024-03-0519:24:13

apple

github.com

memory corruption

ios 17.4

ipados 17.4

kernel

exploited

AI Score

6.2

Confidence

High

EPSS

0.002

Percentile

59.1%

SSVC

Exploitation

Active

Automatable

Technical Impact

Total

JSON

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 17.4 and iPadOS 17.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:apple:ipad_os:-:*:*:*:*:*:*:*"
    ],
    "vendor": "apple",
    "product": "ipad_os",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "17.4",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*"
    ],
    "vendor": "apple",
    "product": "iphone_os",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "17.4",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:apple:macos:14.0:*:*:*:*:*:*:*"
    ],
    "vendor": "apple",
    "product": "macos",
    "versions": [
      {
        "status": "affected",
        "version": "14.0",
        "lessThan": "14.4",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:apple:tvos:-:*:*:*:*:*:*:*"
    ],
    "vendor": "apple",
    "product": "tvos",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "17.4",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:apple:visionos:-:*:*:*:*:*:*:*"
    ],
    "vendor": "apple",
    "product": "visionos",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*"
    ],
    "vendor": "apple",
    "product": "watchos",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "10.4",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]