PT-2024-31047

CVE-2024-44217

Published

2024-10-28

Updated

2024-12-12

Description by

CVSS 3.1

9.1

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18 iPadOS versions prior to 18

Description A permissions issue was addressed by removing vulnerable code and adding additional checks. Password autofill may fill in passwords after failing authentication.

Recommendations For iOS versions prior to 18, update to iOS 18 to resolve the issue. For iPadOS versions prior to 18, update to iPadOS 18 to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Bistrit Dahal

Joshua Keller

Lukas

Vendors

Affected products

Weakness enumeration

CWE-863: Incorrect Authorization

Related identifiers