CVE-2024-44167

MEDIUM

iPadOS < 18.0 - Path Traversal and Arbitrary File Write

Title source: llm
STIX 2.1

Description

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. An app may be able to overwrite arbitrary files.

References (10)

Core 10

Scores

CVSS v3 5.5
EPSS 0.0023
EPSS Percentile 45.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-22
Status published
Products (9)
Apple/iOS and iPadOS < 18
apple/ipados < 18.0
apple/iphone_os < 18.0
Apple/macOS < 13.7
Apple/macOS < 14.7
Apple/macOS < 15
apple/macos 13.0 - 13.7
Apple/visionOS < 2
apple/visionos < 2.0
Published Sep 17, 2024
Tracked Since Feb 18, 2026