CVE-2024-54538

HIGH

iPadOS < 17.7.1 - Denial of Service via Improved Input Validation

Title source: llm
STIX 2.1

Description

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. A remote attacker may be able to cause a denial-of-service.

References (8)

Core 8

Scores

CVSS v3 7.5
EPSS 0.0201
EPSS Percentile 83.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-770
Status published
Products (14)
Apple/iOS and iPadOS < 17.7.1
Apple/iOS and iPadOS < 18.1
apple/ipados < 17.7.1
apple/iphone_os < 17.7.1
Apple/macOS < 13.7.1
Apple/macOS < 14.7.1
Apple/macOS < 15.1
apple/macos 13.0 - 13.7.1
apple/tvos < 18.1
Apple/tvOS < 18.1
... and 4 more
Published Dec 20, 2024
Tracked Since Feb 18, 2026