CVE-2024-27834

Description

The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, Safari 17.5, watchOS 10.5, macOS Sonoma 14.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

References

https://www.bleepingcomputer.com/news/apple/apple-fixes-safari-webkit-zero-day-flaw-exploited-at-pwn2own/?&web_view=true

https://www.bleepingcomputer.com/news/apple/apple-fixes-safari-webkit-zero-day-flaw-exploited-at-pwn2own/

https://support.apple.com/en-us/HT214106

https://support.apple.com/en-us/HT214104

https://support.apple.com/en-us/HT214103

https://support.apple.com/en-us/HT214102

https://support.apple.com/en-us/HT214101

https://lists.fedoraproject.org/archives/list/[email protected]/message/WKIXADCW3O4R2OOSDZGPU55XQFE6NA3M/

https://lists.fedoraproject.org/archives/list/[email protected]/message/ADCLQW54XN37VJZNYD3UKCYATJFIMYXG/

http://www.openwall.com/lists/oss-security/2024/05/21/1

http://seclists.org/fulldisclosure/2024/May/9

http://seclists.org/fulldisclosure/2024/May/17

http://seclists.org/fulldisclosure/2024/May/16

http://seclists.org/fulldisclosure/2024/May/12

http://seclists.org/fulldisclosure/2024/May/10

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3