Paper/Archive/CVE-2024-23265

CVE-2024-23265

Apple iOS and iPadOS — A memory corruption vulnerability was addressed with improved locking.

Description · from the CVE record

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An app may be able to cause unexpected system termination or write kernel memory.

Affected

ProductAffectedFixed inSource
iOS and iPadOS< 16.7.616.7.6CNA
iOS and iPadOS< 17.417.4CNA
macOS< 12.7.412.7.4CNA
macOS< 13.6.513.6.5CNA
macOS< 14.414.4CNA
tvOS< 17.417.4CNA
visionOS< 1.11.1CNA
watchOS< 10.410.4CNA
tvos< 17.417.4CISA-ADP
visionos< 1.11.1CISA-ADP
macos< 12.712.7CISA-ADP
macos< 13.613.6CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.apple.com/en-us/120880refsupport.apple.com/en-us/120881refsupport.apple.com/en-us/120882refsupport.apple.com/en-us/120883refsupport.apple.com/en-us/120884refsupport.apple.com/en-us/120886refsupport.apple.com/en-us/120893refsupport.apple.com/en-us/120895refsupport.apple.com/en-us/HT214087refsupport.apple.com/en-us/HT214086refsupport.apple.com/en-us/HT214081refsupport.apple.com/en-us/HT214083refsupport.apple.com/en-us/HT214082refsupport.apple.com/en-us/HT214085refsupport.apple.com/en-us/HT214084refsupport.apple.com/en-us/HT214088refseclists.org/fulldisclosure/2024/Mar/21refseclists.org/fulldisclosure/2024/Mar/25refseclists.org/fulldisclosure/2024/Mar/24refseclists.org/fulldisclosure/2024/Mar/22refseclists.org/fulldisclosure/2024/Mar/23refseclists.org/fulldisclosure/2024/Mar/26refsupport.apple.com/kb/HT214088refsupport.apple.com/kb/HT214087refsupport.apple.com/kb/HT214085refsupport.apple.com/kb/HT214084refsupport.apple.com/kb/HT214083refsupport.apple.com/kb/HT214082refsupport.apple.com/kb/HT214081