CVE-2024-27834

EUVD-2024-25027
The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, Safari 17.5, watchOS 10.5, macOS Sonoma 14.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CISA-ADPADP
8.1 HIGH
LOCAL
HIGH
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
applesafari
𝑥
< 17.5
appleipados
𝑥
< 17.5
appleiphone_os
𝑥
< 17.5
applemacos
14.0 ≤
𝑥
< 14.5
appletvos
𝑥
< 17.5
applewatchos
𝑥
< 10.5
webkitgtkwebkitgtk
𝑥
< 2.44.2
wpewebkitwpe_webkit
𝑥
< 2.44.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
webkit2gtk
bookworm
2.48.5-1~deb12u1
ignored
bookworm (security)
2.50.4-1~deb12u1
fixed
bullseye
2.44.2-1~deb11u1
ignored
bullseye (security)
2.50.4-1~deb11u1
fixed
forky
2.50.4-1
fixed
sid
2.50.4-1
fixed
trixie
2.50.1-1~deb13u1
fixed
trixie (security)
2.50.4-1~deb13u1
fixed
wpewebkit
bookworm
ignored
bullseye
ignored
bullseye (security)
vulnerable
forky
2.50.4-1
fixed
sid
2.50.4-1
fixed
trixie
2.48.3-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
webkitgtk
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
xenial
ignored
webkit2gtk
bionic
ignored
focal
ignored
jammy
Fixed 2.44.2-0ubuntu0.22.04.1
released
mantic
Fixed 2.44.2-0ubuntu0.23.10.1
released
noble
Fixed 2.44.2-0ubuntu0.24.04.1
released
xenial
ignored
qtwebkit-source
bionic
ignored
focal
dne
jammy
dne
mantic
dne
noble
dne
xenial
ignored
wpewebkit
focal
ignored
jammy
ignored
mantic
dne
noble
dne
qtwebkit-opensource-src
bionic
ignored
focal
ignored
jammy
ignored
mantic
ignored
noble
ignored
xenial
ignored
Common Weakness Enumeration
References
http://seclists.org/fulldisclosure/2024/May/10
http://seclists.org/fulldisclosure/2024/May/12
http://seclists.org/fulldisclosure/2024/May/16
http://seclists.org/fulldisclosure/2024/May/17
http://seclists.org/fulldisclosure/2024/May/9
http://www.openwall.com/lists/oss-security/2024/05/21/1
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ADCLQW54XN37VJZNYD3UKCYATJFIMYXG/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WKIXADCW3O4R2OOSDZGPU55XQFE6NA3M/
https://support.apple.com/en-us/HT214101
https://support.apple.com/en-us/HT214102
https://support.apple.com/en-us/HT214103
https://support.apple.com/en-us/HT214104
https://support.apple.com/en-us/HT214106
http://seclists.org/fulldisclosure/2024/May/10
http://seclists.org/fulldisclosure/2024/May/12
http://seclists.org/fulldisclosure/2024/May/16
http://seclists.org/fulldisclosure/2024/May/17
http://seclists.org/fulldisclosure/2024/May/9
http://www.openwall.com/lists/oss-security/2024/05/21/1
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ADCLQW54XN37VJZNYD3UKCYATJFIMYXG/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WKIXADCW3O4R2OOSDZGPU55XQFE6NA3M/
https://support.apple.com/en-us/HT214101
https://support.apple.com/en-us/HT214102
https://support.apple.com/en-us/HT214103
https://support.apple.com/en-us/HT214104
https://support.apple.com/en-us/HT214106
https://support.apple.com/kb/HT214100
https://support.apple.com/kb/HT214102
https://support.apple.com/kb/HT214104
https://support.apple.com/kb/HT214106