Fiche vulnérabilité
CVE-2024-44240 : faille moyenne apple ipados (CVSS 5.5)
Description
The issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Processing a maliciously crafted font may result in the disclosure of process memory.
En bref
- Sévérité
- Moyenne (CVSS 5.5)
- Vecteur CVSS
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Exploitation active
- Non signalée par la CISA
- Publication
- 28 oct. 2024
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- apple ipados
- apple iphone os
- apple macos
- apple tvos
- apple visionos
- apple watchos
Références
- Fiche CVE-2024-44240 sur le NVD (NIST)
- support.apple.com/en-us/121563
- support.apple.com/en-us/121564
- support.apple.com/en-us/121565
- support.apple.com/en-us/121566
- support.apple.com/en-us/121567
- support.apple.com/en-us/121568
- support.apple.com/en-us/121569
- support.apple.com/en-us/121570
- seclists.org/fulldisclosure/2024/Oct/10
- seclists.org/fulldisclosure/2024/Oct/11
- seclists.org/fulldisclosure/2024/Oct/12
- seclists.org/fulldisclosure/2024/Oct/13
- seclists.org/fulldisclosure/2024/Oct/15
- seclists.org/fulldisclosure/2024/Oct/16