Vulnerabilities

TI-2024-29767 CVE-2024-44201 · GHSA-6vmf-4hpw-fgcm

Apple iOS and iPadOS: Processing a malicious crafted file may lead to a denial-of-service

LOW 25

The issue was addressed with improved memory handling.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00278 Published 2024-12-11 Fixed in 18.1, 17.7.3 +3 CWE-404

TI-2024-36564 CVE-2024-54485 · GHSA-w7rc-39gw-qjww

Insecure storage of sensitive information in Apple iOS and iPadOS

LOW 25

The issue was addressed by adding additional logic.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00286 Published 2024-12-11 Fixed in 18.2, 17.7.3 +1 CWE-922

TI-2024-36570 CVE-2024-54492 · GHSA-jw8x-5w8f-9hrm

Apple iOS and iPadOS: An attacker in a privileged network position may be able to alter…

MEDIUM 51

This issue was addressed by using HTTPS when sending information over the network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00879 Published 2024-12-11 Fixed in 18.2, 17.7.3 +2

TI-2024-36582 CVE-2024-54505 · GHSA-qfp8-pvg8-2xph

Type confusion in Apple Safari

MEDIUM 42

A type confusion issue was addressed with improved memory handling.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0107 Published 2024-12-11 Partial fix · 18.2, 17.7.3 +3 CWE-843

TI-2024-29807 CVE-2024-44246 · GHSA-c9mr-7r2v-xjc9

Out-of-bounds read in Apple Safari

LOW 26

The issue was addressed with improved routing of Safari-originated requests.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01121 Published 2024-12-11 Fixed in 18.2, 17.7.3 +1 CWE-125

TI-2024-36572 CVE-2024-54494 · GHSA-q7qj-rx6w-8pxw

Race condition in Apple iOS and iPadOS

LOW 28

A race condition was addressed with additional validation.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00763 Published 2024-12-11 Fixed in 18.2, 17.7.3 +5 CWE-362

TI-2024-29788 CVE-2024-44225 · GHSA-9wm3-v99j-79rf

Apple iOS and iPadOS: An app may be able to gain elevated privileges

LOW 36

A logic issue was addressed with improved checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00306 Published 2024-12-11 Fixed in 18.2, 17.7.3 +4

TI-2024-36587 CVE-2024-54510 · GHSA-58f5-8jq5-r8p2

Race condition in Apple iOS and iPadOS

LOW 23

A race condition was addressed with improved locking.

CVSS 3.1MEDIUM 5.1 Local No auth No interaction EPSS 0.00198 Published 2024-12-11 Fixed in 18.2, 17.7.3 +4 CWE-362

TI-2024-29806 CVE-2024-44245 · GHSA-67jx-fcjg-p4rh

Out-of-bounds write in Apple iOS and iPadOS

LOW 31

The issue was addressed with improved memory handling.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00295 Published 2024-12-11 Fixed in 18.2, 17.7.3 +3 CWE-787

TI-2024-36562 CVE-2024-54479 · GHSA-hp58-68h4-82p8

Apple Safari: Processing maliciously crafted web content may lead to an unexpected…

MEDIUM 42

The issue was addressed with improved checks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01585 Published 2024-12-11 Partial fix · 18.2, 17.7.3 +3

TI-2024-36578 CVE-2024-54501 · GHSA-372f-8jhc-h6mp

Resource allocation without limits in Apple iOS and iPadOS

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00314 Published 2024-12-11 Fixed in 18.2, 17.7.3 +5 CWE-770

TI-2024-36577 CVE-2024-54500 · GHSA-rmh8-223g-x64m

Apple iOS and iPadOS: Processing a maliciously crafted image may result in disclosure of…

LOW 25

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00315 Published 2024-12-11 Fixed in 18.2, 17.7.3 +5

TI-2024-36565 CVE-2024-54486 · GHSA-wj3x-pcf8-r7qm

Apple iOS and iPadOS: Processing a maliciously crafted font may result in the disclosure…

LOW 32

The issue was addressed with improved checks.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01361 Published 2024-12-11 Fixed in 18.2, 17.7.3 +5

Vulnerabilities

Filters