CVE-2024-27836

2024-06-1020:56:43

apple

github.com

improvement

security checks

visionos 1.2

macos sonoma 14.5

ios 17.5

ipados 17.5

arbitrary code execution

malicious image processing

6.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.2%

JSON

The issue was addressed with improved checks. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, iOS 17.5 and iPadOS 17.5. Processing a maliciously crafted image may lead to arbitrary code execution.

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "iOS and iPadOS",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "17.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "14.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "visionOS",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "1.2",
        "versionType": "custom"
      }
    ]
  }
]