CVE-2024-27828

HIGH

iPadOS < 17.5 - Remote Code Execution via Memory Corruption

Title source: llm
STIX 2.1

Description

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to execute arbitrary code with kernel privileges.

References (13)

Core 13

Scores

CVSS v3 7.8
EPSS 0.0027
EPSS Percentile 17.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-786 CWE-788
Status published
Products (9)
Apple/iOS and iPadOS < 17.5
apple/ipados < 17.5
apple/iphone_os < 17.5
apple/tvos < 17.5
Apple/tvOS < 17.5
apple/visionos < 1.2
Apple/visionOS < 1.2
Apple/watchOS < 10.5
apple/watchos < 17.5
Published Jun 10, 2024
Tracked Since Feb 18, 2026