CVE-2024-27834

Name of the Vulnerable Software and Affected Versions Safari versions prior to 17.5 iOS versions prior to 16.7.8 iOS versions prior to 17.5 iPadOS versions prior to 16.7.8 iPadOS versions prior to 17.5 macOS Sonoma versions prior to 14.5 tvOS versions prior to 17.5 watchOS versions prior to 10.5 WebKitGTK versions prior to 2.44.2-1deb11u1 (bullseye) WebKitGTK versions prior to 2.44.2-1deb12u1 (bookworm)

Description An improper authentication issue exists where an attacker with arbitrary read and write capability may be able to bypass Pointer Authentication, a security mechanism used to protect the integrity of pointers in memory. This flaw has been actively exploited in the wild to deliver information-stealing malware, particularly targeting unpatched devices.

Recommendations Update Safari to version 17.5. Update iOS to version 16.7.8 or 17.5. Update iPadOS to version 16.7.8 or 17.5. Update macOS Sonoma to version 14.5. Update tvOS to version 17.5. Update watchOS to version 10.5. Update WebKitGTK to version 2.44.2-1deb11u1 for bullseye distribution. Update WebKitGTK to version 2.44.2-1deb12u1 for bookworm distribution.