CVE-2024-27802 | BDVDB-2026-238939 Detail
AppleiOS and iPadOS
Description#
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-787 Out-of-bounds Write
References#
- https://support.apple.com/en-us/120898
- https://support.apple.com/en-us/120899
- https://support.apple.com/en-us/120900
- https://support.apple.com/en-us/120901
- https://support.apple.com/en-us/120903
- https://support.apple.com/en-us/120905
- https://support.apple.com/en-us/120906
- https://support.apple.com/en-us/HT214101
- https://support.apple.com/en-us/HT214100
- https://support.apple.com/en-us/HT214107
- https://support.apple.com/en-us/HT214106
- https://support.apple.com/en-us/HT214105
- https://support.apple.com/en-us/HT214108
- https://support.apple.com/en-us/HT214102
- https://support.apple.com/kb/HT214107
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.