CVE-2024-54505 Information

Description

A type confusion issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3 watchOS 11.2 visionOS 2.2 tvOS 18.2 macOS Sequoia 15.2 Safari 18.2 iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Reference

https://support.apple.com/en-us/121837 https://support.apple.com/en-us/121838 https://support.apple.com/en-us/121839 https://support.apple.com/en-us/121843 https://support.apple.com/en-us/121844 https://support.apple.com/en-us/121845 https://support.apple.com/en-us/121846

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

REQUIRED

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

8.8