CVE-2024-27857

2024-06-1020:56:44

apple

github.com

out-of-bounds access

improved bounds checking

visionos 1.2

macos sonoma 14.5

tvos 17.5

ios 17.5

ipados 17.5

remote attacker

unexpected app termination

arbitrary code execution

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

31.2%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, tvOS 17.5, iOS 17.5 and iPadOS 17.5. A remote attacker may be able to cause unexpected app termination or arbitrary code execution.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:apple:tvos:1.0.0:*:*:*:*:*:*:*"
    ],
    "vendor": "apple",
    "product": "tvos",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.0",
        "lessThan": "17.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:apple:macos:1.0:*:*:*:*:*:*:*"
    ],
    "vendor": "apple",
    "product": "macos",
    "versions": [
      {
        "status": "affected",
        "version": "1.0",
        "lessThan": "14.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:apple:ios:0:*:*:*:*:*:*:*"
    ],
    "vendor": "apple",
    "product": "ios",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "17.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:apple:ipados:0:*:*:*:*:*:*:*"
    ],
    "vendor": "apple",
    "product": "ipados",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "17.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:apple:visionos:0:*:*:*:*:*:*:*"
    ],
    "vendor": "apple",
    "product": "visionos",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.2",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]