CVE-2024-23265
EUVD-2024-2078408.03.2024, 02:15
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to cause unexpected system termination or write kernel memory.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apple | ipados | 𝑥 < 16.7.6 |
| apple | ipados | 17.0 ≤ 𝑥 < 17.4 |
| apple | iphone_os | 𝑥 < 16.7.6 |
| apple | iphone_os | 17.0 ≤ 𝑥 < 17.4 |
| apple | macos | 12.0 ≤ 𝑥 < 12.7.4 |
| apple | macos | 13.0 ≤ 𝑥 < 13.6.5 |
| apple | macos | 14.0 ≤ 𝑥 < 14.4 |
| apple | tvos | 𝑥 < 17.4 |
| apple | visionos | 𝑥 < 1.1 |
| apple | watchos | 𝑥 < 10.4 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| apple | tvos | 𝑥 < 17.4 | ADP |
| apple | visionos | 𝑥 < 1.1 | ADP |
| apple | macos | 𝑥 < 12.7 | ADP |
| apple | macos | 𝑥 < 13.6 | ADP |
| apple | macos | 𝑥 < 14.4 | ADP |
| apple | watchos | 𝑥 < 10.4 | ADP |
| apple | ios | 𝑥 < 17.4 | ADP |
| apple | ipad_os | 𝑥 < 17.4 | ADP |
Common Weakness Enumeration
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.
- CWE-400 - Uncontrolled Resource ConsumptionThe software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
References