CVE-2024-44160
EUVD-2024-4091217.09.2024, 00:15
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. Processing a maliciously crafted texture may lead to unexpected app termination.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apple | macos | 13.0 ≤ 𝑥 < 13.7 |
| apple | macos | 14.0 ≤ 𝑥 < 14.7 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| apple | macos | 13.0 ≤ 𝑥 < 13.7 | ADP |
| apple | macos | 14.0 ≤ 𝑥 < 14.7 | ADP |
Common Weakness Enumeration
- CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The program copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
- CWE-400 - Uncontrolled Resource ConsumptionThe software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.