PT-2025-3052
CVE-2024-54543
·
Published
2024-12-11
·
Updated
2025-11-25
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
visionOS versions prior to 2.2
tvOS versions prior to 18.2
Safari versions prior to 18.2
watchOS versions prior to 11.2
iOS versions prior to 18.2
iPadOS versions prior to 18.2
macOS Sequoia versions prior to 15.2
Description
The issue is related to the processing of maliciously crafted web content, which may lead to memory corruption due to a buffer overflow in the Web Handler component. This can potentially allow a remote attacker to access confidential information. The problem was solved with improved memory handling.
Recommendations
For visionOS versions prior to 2.2, update to visionOS 2.2 or later.
For tvOS versions prior to 18.2, update to tvOS 18.2 or later.
For Safari versions prior to 18.2, update to Safari 18.2 or later.
For watchOS versions prior to 11.2, update to watchOS 11.2 or later.
For iOS versions prior to 18.2, update to iOS 18.2 or later.
For iPadOS versions prior to 18.2, update to iPadOS 18.2 or later.
For macOS Sequoia versions prior to 15.2, update to macOS Sequoia 15.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾