CVE-2024-44198

MEDIUM

iPadOS < 18.0 - Integer Overflow via Malicious Web Content

Title source: llm
STIX 2.1

Description

An integer overflow was addressed through improved input validation. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. Processing maliciously crafted web content may lead to an unexpected process crash.

References (8)

Core 8
Core References
Release Notes, Vendor Advisory
https://support.apple.com/en-us/121238
Release Notes, Vendor Advisory
https://support.apple.com/en-us/121240
Release Notes, Vendor Advisory
https://support.apple.com/en-us/121248
Release Notes, Vendor Advisory
https://support.apple.com/en-us/121249
Release Notes, Vendor Advisory
https://support.apple.com/en-us/121250

Scores

CVSS v3 5.5
EPSS 0.0004
EPSS Percentile 11.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-190
Status published
Products (11)
Apple/iOS and iPadOS < 18
apple/ipados < 18.0
apple/iphone_os < 18.0
Apple/macOS < 15
apple/macos < 15.0
Apple/tvOS < 18
apple/tvos < 18.0
Apple/visionOS < 2
apple/visionos < 2.0
Apple/watchOS < 11
... and 1 more
Published Sep 17, 2024
Tracked Since Feb 18, 2026