PT-2025-3052

CVE-2024-54543

·

Published

2024-12-11

·

Updated

2025-11-25

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions visionOS versions prior to 2.2 tvOS versions prior to 18.2 Safari versions prior to 18.2 watchOS versions prior to 11.2 iOS versions prior to 18.2 iPadOS versions prior to 18.2 macOS Sequoia versions prior to 15.2
Description The issue is related to the processing of maliciously crafted web content, which may lead to memory corruption due to a buffer overflow in the Web Handler component. This can potentially allow a remote attacker to access confidential information. The problem was solved with improved memory handling.
Recommendations For visionOS versions prior to 2.2, update to visionOS 2.2 or later. For tvOS versions prior to 18.2, update to tvOS 18.2 or later. For Safari versions prior to 18.2, update to Safari 18.2 or later. For watchOS versions prior to 11.2, update to watchOS 11.2 or later. For iOS versions prior to 18.2, update to iOS 18.2 or later. For iPadOS versions prior to 18.2, update to iPadOS 18.2 or later. For macOS Sequoia versions prior to 15.2, update to macOS Sequoia 15.2 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ALSA-2025:2034
ALSA-2025:2035
CESA-2025_2034
DLA-4009-1
DSA-5835-1
INFSA-2025_2034
INFSA-2025_2035
MGASA-2025-0313
OPENSUSE-SU-2025_0638-1
OPENSUSE-SU-2025_0691-1
RHSA-2025:10364
RHSA-2025:1957
RHSA-2025:1958
RHSA-2025:1959
RHSA-2025:1960
RHSA-2025:2034
RHSA-2025_2034
RHSA-2025:2035
RHSA-2025_2035
RHSA-2025:2121
RHSA-2025:2125
RHSA-2025:2126
SUSE-SU-2025:0638-1
SUSE-SU-2025:0639-1
SUSE-SU-2025:0691-1
SUSE-SU-2025:0735-1
Found an issue in the description? Have something to add? Feel free to write us 👾