CVE-2024-27841

MEDIUM | Platform: iOS | Changelog

CVE Details

Description

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An app may be able to disclose kernel memory.

CVSS 3.1 Score

Metric	Value
Base Score	5.5 (MEDIUM)
Vector	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N`

Weakness

CWE-284

References

Apple Security Advisory
NVD Entry
https://support.apple.com/en-us/120903
http://seclists.org/fulldisclosure/2024/May/10 (Mailing List, Vendor Advisory)
http://seclists.org/fulldisclosure/2024/May/12 (Mailing List)
https://support.apple.com/en-us/HT214101 (Vendor Advisory)
https://support.apple.com/en-us/HT214106 (Vendor Advisory)
https://support.apple.com/kb/HT214101 (Vendor Advisory)
https://support.apple.com/kb/HT214106 (Vendor Advisory)