VulnerabilityModified
CVE-2024-27841
An app may be able to disclose kernel memory.
MEDIUM 5.5EPSS 0.44%
Does this matter?
Lower severity and a low EPSS score (0.44%). Track it; it rarely justifies an emergency change on its own.
Description
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. An app may be able to disclose kernel memory.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS
- 0.44% probability · 37th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-284
- Affected
- apple/ipados · apple/iphone os · apple/macos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/120903
- https://support.apple.com/en-us/120905
- http://seclists.org/fulldisclosure/2024/May/10Mailing List, Vendor Advisory
- http://seclists.org/fulldisclosure/2024/May/12Mailing List
- https://support.apple.com/en-us/HT214101Vendor Advisory
- https://support.apple.com/en-us/HT214106Vendor Advisory
- https://support.apple.com/kb/HT214101Vendor Advisory
- https://support.apple.com/kb/HT214106Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.