CVE-2024-44191

EUVD-2024-40940
This issue was addressed through improved state management. This issue is fixed in Xcode 16, iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. An app may gain unauthorized access to Bluetooth.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 6%
Affected Products (NVD)
VendorProductVersion
applexcode
𝑥
< 16.0
appleipados
𝑥
< 17.7
appleiphone_os
𝑥
< 17.7
applemacos
𝑥
< 15.0
appletvos
𝑥
< 18.0
applevisionos
𝑥
< 2.0
applewatchos
𝑥
< 11.0
𝑥
= Vulnerable software versions
References
https://support.apple.com/en-us/121238
https://support.apple.com/en-us/121239
https://support.apple.com/en-us/121240
https://support.apple.com/en-us/121246
https://support.apple.com/en-us/121248
https://support.apple.com/en-us/121249
https://support.apple.com/en-us/121250
http://seclists.org/fulldisclosure/2024/Sep/32
http://seclists.org/fulldisclosure/2024/Sep/33
http://seclists.org/fulldisclosure/2024/Sep/36
http://seclists.org/fulldisclosure/2024/Sep/39