PT-2024-31105

CVE-2024-44281

Published

2024-10-28

Updated

2024-10-31

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.7.1 macOS versions prior to 14.7.1

Description The issue is related to an out-of-bounds read that can be addressed with improved input validation. Parsing a file may lead to disclosure of user information.

Recommendations For macOS versions prior to 13.7.1, update to macOS Ventura 13.7.1. For macOS versions prior to 14.7.1, update to macOS Sonoma 14.7.1.

Exploitability

Fix

Impacts

Researchers

Hossein Lotfi

Hosselot

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

Related identifiers

CVE-2024-44281