CVE-2024-44234

EUVD-2024-40963
The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2.1, watchOS 11.1, tvOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1. Parsing a maliciously crafted video file may lead to unexpected system termination.
Classic Buffer Overflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CISA-ADPADP
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 34%
Affected Products (NVD)
VendorProductVersion
appleipados
𝑥
< 17.7.1
appleipados
18.0
appleiphone_os
𝑥
< 17.7.1
appleiphone_os
18.0
applemacos
𝑥
< 13.7.1
applemacos
14.0 ≤
𝑥
< 14.7.1
appletvos
𝑥
< 18.1
applevisionos
𝑥
< 2.1
applewatchos
𝑥
< 11.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.apple.com/en-us/121563
https://support.apple.com/en-us/121565
https://support.apple.com/en-us/121566
https://support.apple.com/en-us/121567
https://support.apple.com/en-us/121568
https://support.apple.com/en-us/121569
https://support.apple.com/en-us/121570