CVE-2024-54507
CVE-2024-54507
5.5
MediumPublished:
Last updated:
Source:product-security@apple.com
Modified
Weakness (CWE)
CVSS Vector
v3.1- Attack Vector
- Local
- Attack Complexity
- Low
- Privileges Required
- Low
- User Interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Description
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. An attacker with user privileges may be able to read kernel memory.
References
product-security@apple.com
https://support.apple.com/en-us/121837product-security@apple.com
https://support.apple.com/en-us/121839