CVE-2024-44258
EUVD-2024-4097828.10.2024, 21:15
This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, tvOS 18.1, visionOS 2.1. Restoring a maliciously crafted backup file may lead to modification of protected system files.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apple | ipados | 𝑥 < 17.7.1 |
| apple | ipados | 18.0 ≤ 𝑥 < 18.1 |
| apple | iphone_os | 𝑥 < 17.7.1 |
| apple | iphone_os | 18.0 ≤ 𝑥 < 18.1 |
| apple | tvos | 𝑥 < 18.1 |
| apple | visionos | 𝑥 < 2.1 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| apple | visionos | 𝑥 < 2.1 | ADP |
| apple | ipados | 𝑥 < 17.7 | ADP |
| apple | ipados | 18.0 ≤ 𝑥 < 18.1 | ADP |
| apple | iphone_os | 𝑥 < 17.7 | ADP |
| apple | iphone_os | 18.0 ≤ 𝑥 < 18.1 | ADP |
| apple | tvos | 𝑥 < 18.1 | ADP |
References