CVE-2024-27876

MEDIUM

macOS Ventura <13.7 - Code Injection

Title source: llm

Description

A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, iOS 18 and iPadOS 18, macOS Sonoma 14.7, macOS Sequoia 15. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files.

Exploits (1)

nomisec WORKING POC 48 stars

by 0xilis · poc

https://github.com/0xilis/CVE-2024-27876

View Code ZIP pw:eip

References (12)

[Vendor Advisory] https://support.apple.com/en-us/121234

[Vendor Advisory] https://support.apple.com/en-us/121238

[Vendor Advisory] https://support.apple.com/en-us/121246

[Vendor Advisory] https://support.apple.com/en-us/121247

[Vendor Advisory] https://support.apple.com/en-us/121249

[Vendor Advisory] https://support.apple.com/en-us/121250

[Mailing List] http://seclists.org/fulldisclosure/2024/Sep/32

[Mailing List] http://seclists.org/fulldisclosure/2024/Sep/33

[Mailing List] http://seclists.org/fulldisclosure/2024/Sep/36

[Mailing List] http://seclists.org/fulldisclosure/2024/Sep/39

[Mailing List] http://seclists.org/fulldisclosure/2024/Sep/40

[Mailing List] http://seclists.org/fulldisclosure/2024/Sep/41

Scores

CVSS v3 5.5

EPSS 0.0004

EPSS Percentile 12.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Classification

CWE

CWE-362

Status published

Affected Products (4)

apple/ipados < 17.7

apple/iphone_os < 17.7

apple/macos < 13.7

apple/visionos < 2.0

Timeline

Published Sep 17, 2024

Tracked Since Feb 18, 2026