by Kastro
Paper/Archive/CVE-2024-44299

CVE-2024-44299

Apple iOS and iPadOS — The issue was addressed with improved bounds checks.

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 40.7.407 × 208.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware.

Affected

ProductAffectedFixed inSource
iOS and iPadOS< 18.118.1CNA
macOS< 15.115.1CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADP8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsupport.apple.com/en-us/121563refsupport.apple.com/en-us/121564