CVE-2024-27815

HIGH
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2024-27815 has a selected CVSS score of 7.8 (high); EIP currently links 1 repository PoC.

Description

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to execute arbitrary code with kernel privileges.

Description source: CVE List

Exploitation context

Available material

Repository PoCs
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 22, 2024 · Source: CVE List

Affected products and versions

7
ProductSourceVersion range

iOS and iPadOS

Browse Apple / iOS and iPadOS
CVE ListBefore 17.5affected

macOS

Browse Apple / macOS

Default status: unknown

CVE ListBefore 14.5affected

tvOS

Browse Apple / tvOS

Default status: unknown

CVE ListBefore 17.5affected

visionOS

Browse Apple / visionOS

Default status: unknown

CVE ListBefore 1.2affected

watchOS

Browse Apple / watchOS

Default status: unknown

CVE ListBefore 10.5affected

ios

Browse apple / ios

Default status: unknown

CVE ListBefore 17.5affected

ipados

Browse apple / ipados

Default status: unknown

CVE ListBefore 17.5affected

Proofs of concept

1

Repository PoCs

GitHubjprx/CVE-2024-27815Repository PoCby jprx51Not analyzed2 files

2.7 KiB

GitHub
PoC details

References

Showing 12 of 17