CVE-2024-44169

Sept. 17, 2024, 9:35 p.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

macOS Sequoia

  • 15

iOS

  • 17.7
  • 18

iPadOS

  • 17.7
  • 18

visionOS

  • 2

watchOS

  • 11

macOS Sonoma

  • 14.7

tvOS

  • 18

macOS Ventura

  • 13.7

Source

product-security@apple.com

Tags

CVE-2024-44169 details

Published : Sept. 17, 2024, 12:15 a.m.
Last Modified : Sept. 17, 2024, 9:35 p.m.

Description

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, tvOS 18. An app may be able to cause unexpected system termination.

CVSS Score

1 2 3 4 5 6 7 8.1 9 10

Weakness

Weakness Name Description
CWE-400 Uncontrolled Resource Consumption The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

Base Score

8.1

Exploitability Score

2.8

Impact Score

5.2

Base Severity

HIGH

References

URL Source
https://support.apple.com/en-us/121234 product-security@apple.com
https://support.apple.com/en-us/121238 product-security@apple.com
https://support.apple.com/en-us/121240 product-security@apple.com
https://support.apple.com/en-us/121246 product-security@apple.com
https://support.apple.com/en-us/121247 product-security@apple.com
https://support.apple.com/en-us/121248 product-security@apple.com
https://support.apple.com/en-us/121249 product-security@apple.com
https://support.apple.com/en-us/121250 product-security@apple.com
This website uses the NVD API, but is not approved or certified by it.