CVE-2024-54564

MEDIUM

iPadOS < 17.6 - Unprotected File Execution via AirDrop Quarantine Bypass

Title source: llm

Description

This issue was addressed through improved state management. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, visionOS 1.3. A file received from AirDrop may not have the quarantine flag applied.

References (3)

Core 3

Core References

Release Notes, Vendor Advisory

https://support.apple.com/en-us/120909

Release Notes, Vendor Advisory

https://support.apple.com/en-us/120911

Release Notes, Vendor Advisory

https://support.apple.com/en-us/120915

Scores

CVSS v3 6.5

EPSS 0.0032

EPSS Percentile 24.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-276

Status published

Products (7)

Apple/iOS and iPadOS < 17.6

apple/ipados < 17.6

apple/iphone_os < 17.6

apple/macos < 14.6

Apple/macOS < 14.6

apple/visionos < 1.3

Apple/visionOS < 1.3

Published Mar 21, 2025

Tracked Since Feb 18, 2026