CVE-2024-27802

June 10, 2024, 9:15 p.m.

None
No Score

Description

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Product(s) Impacted

Product Versions
macOS Monterey
  • ['12.7.5']
macOS Ventura
  • ['13.6.7']
macOS Sonoma
  • ['14.5']
tvOS
  • ['17.5']
iOS
  • ['16.7.8', '17.5']
iPadOS
  • ['16.7.8', '17.5']
visionOS
  • ['1.2']

Weaknesses

Common security weaknesses mapped to this vulnerability.

References

https://support.apple.com/en-us/HT214100
https://support.apple.com/en-us/HT214101
https://support.apple.com/en-us/HT214102
https://support.apple.com/en-us/HT214105
https://support.apple.com/en-us/HT214106
https://support.apple.com/en-us/HT214107
https://support.apple.com/en-us/HT214108
https://support.apple.com/kb/HT214108

Tags

product-security@apple.com
2024-06-10
CVE-2024-27802

Timeline

Published: June 10, 2024, 9:15 p.m.
Last Modified: June 10, 2024, 9:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

product-security@apple.com

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.