CVE-2024-27834

Description

The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, Safari 17.5, watchOS 10.5, macOS Sonoma 14.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

Reserved 2024-02-26 | Published 2024-05-13 | Updated 2025-02-13 | Assigner apple

Problem types

An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication

Product status

Any version before 17.5
affected

Any version before 14.5
affected

Any version before 10.5
affected

Any version before 17.5
affected

Any version before 17.5
affected

References

support.apple.com/en-us/HT214101

support.apple.com/en-us/HT214106

support.apple.com/en-us/HT214104

support.apple.com/en-us/HT214103

support.apple.com/en-us/HT214102

seclists.org/fulldisclosure/2024/May/17

www.openwall.com/lists/oss-security/2024/05/21/1

seclists.org/fulldisclosure/2024/May/10

seclists.org/fulldisclosure/2024/May/9

seclists.org/fulldisclosure/2024/May/12

seclists.org/fulldisclosure/2024/May/16

lists.fedoraproject.org/...WKIXADCW3O4R2OOSDZGPU55XQFE6NA3M/

lists.fedoraproject.org/...ADCLQW54XN37VJZNYD3UKCYATJFIMYXG/

cve.org (CVE-2024-27834)

nvd.nist.gov (CVE-2024-27834)

Download JSON