VulnerabilityModified
CVE-2024-54478
An out-of-bounds access issue was addressed with improved bounds checking.
MEDIUM 6.5EPSS 0.60%
Does this matter?
Lower severity and a low EPSS score (0.60%). Track it; it rarely justifies an emergency change on its own.
Description
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.4, macOS Sequoia 15.2, macOS Sonoma 14.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to an unexpected process crash.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- EPSS
- 0.60% probability · 47th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-125
- Affected
- apple/ipados · apple/iphone os · apple/macos · apple/tvos · apple/visionos · apple/watchos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/121837Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121839Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121840Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121843Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121844Release Notes, Vendor Advisory
- https://support.apple.com/en-us/121845Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122067Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Jan/14
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.