CVE-2024-27880

Description

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, tvOS 18. Processing a maliciously crafted file may lead to unexpected app termination.

Reserved 2024-02-26 | Published 2024-09-16 | Updated 2024-09-17 | Assigner apple

Problem types

Processing a maliciously crafted file may lead to unexpected app termination

Product status

Any version before 15
affected

Any version before 18
affected

Any version before 2
affected

Any version before 17.7
affected

Any version before 18
affected

Any version before 14.7
affected

Any version before 11
affected

References

support.apple.com/en-us/121238

support.apple.com/en-us/121248

support.apple.com/en-us/121249

support.apple.com/en-us/121246

support.apple.com/en-us/121250

support.apple.com/en-us/121247

support.apple.com/en-us/121240

cve.org (CVE-2024-27880)

nvd.nist.gov (CVE-2024-27880)

Download JSON