CVE-2024-27833

EUVD-2024-25026
An integer overflow was addressed with improved input validation. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, tvOS 17.5, visionOS 1.2. Processing maliciously crafted web content may lead to arbitrary code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
Affected Products (NVD)
VendorProductVersion
applesafari
𝑥
< 17.5
appleipados
𝑥
< 16.7.8
appleipados
17.0 ≤
𝑥
< 17.5
appleiphone_os
𝑥
< 16.7.8
appleiphone_os
17.0 ≤
𝑥
< 17.5
appletvos
𝑥
< 17.5
applevisionos
𝑥
< 1.2
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
appleiphone_os
𝑥
< 17.5
ADP
appleiphone_os
𝑥
< 16.7
ADP
appleipad_os
𝑥
< 17.5
ADP
appleipad_os
𝑥
< 16.7
ADP
applevisionos
𝑥
< 1.2
ADP
applesafari
𝑥
< 17.5
ADP
appletvos
𝑥
< 17.5
ADP
Common Weakness Enumeration
References
https://support.apple.com/en-us/120896
https://support.apple.com/en-us/120898
https://support.apple.com/en-us/120901
https://support.apple.com/en-us/120905
https://support.apple.com/en-us/120906
http://seclists.org/fulldisclosure/2024/Jun/5
https://support.apple.com/en-us/HT214100
https://support.apple.com/en-us/HT214101
https://support.apple.com/en-us/HT214102
https://support.apple.com/en-us/HT214103
https://support.apple.com/en-us/HT214108
https://support.apple.com/kb/HT214100
https://support.apple.com/kb/HT214102
https://support.apple.com/kb/HT214103
https://support.apple.com/kb/HT214108