PT-2024-31107

CVE-2024-44283

Published

2024-10-28

Updated

2024-12-12

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.7.1 macOS versions prior to 14.7.1

Description The issue is related to an out-of-bounds read that can be triggered by parsing a maliciously crafted file, potentially leading to an unexpected app termination.

Recommendations For macOS versions prior to 13.7.1, update to macOS Ventura 13.7.1. For macOS versions prior to 14.7.1, update to macOS Sonoma 14.7.1.

Exploitability

Fix

Impacts

Researchers

Hossein Lotfi

Hosselot

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

Related identifiers

CVE-2024-44283