Vulnerability Details : CVE-2024-27804

Potential exploit
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to execute arbitrary code with kernel privileges.
Published 2024-05-13 23:00:48
Updated 2024-12-12 14:33:01
Source Apple Inc.
View at NVD,   CVE.org
Vulnerability category: Execute code

Products affected by CVE-2024-27804

Exploit prediction scoring system (EPSS) score for CVE-2024-27804

EPSS FAQ
1.03%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 76 %
Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2024-27804

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
8.1
 HIGH CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
1.4
6.0
 134c704f-9b21-4f2e-91b3-4a467353bcc0 2024-07-03
5.5
 MEDIUM CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1.8
3.6
 NIST 2024-12-09

CWE ids for CVE-2024-27804

  • The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.
    Assigned by: nvd@nist.gov (Primary)
  • The product manages a group of objects or resources and performs a separate memory allocation for each object, but it does not properly limit the total amount of memory that is consumed by all of the combined objects.
    Assigned by: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

References for CVE-2024-27804

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close