CVE-2024-27851

Description

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing maliciously crafted web content may lead to arbitrary code execution.

PUBLISHED Reserved 2024-02-26 | Published 2024-06-10 | Updated 2025-11-04 | Assigner apple

Problem types

Processing maliciously crafted web content may lead to arbitrary code execution

Product status

References

support.apple.com/en-us/HT214101

support.apple.com/en-us/HT214106

support.apple.com/en-us/HT214108

support.apple.com/en-us/HT214104

support.apple.com/en-us/HT214103

support.apple.com/en-us/HT214102

seclists.org/fulldisclosure/2024/Jun/5

support.apple.com/kb/HT214108

support.apple.com/kb/HT214106

support.apple.com/kb/HT214104

support.apple.com/kb/HT214102

support.apple.com/kb/HT214101

support.apple.com/en-us/HT214101

support.apple.com/en-us/HT214106

support.apple.com/en-us/HT214108

support.apple.com/en-us/HT214104

support.apple.com/en-us/HT214103

support.apple.com/en-us/HT214102

seclists.org/fulldisclosure/2024/Jun/5

cve.org (CVE-2024-27851)

nvd.nist.gov (CVE-2024-27851)

Download JSON