The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, iOS 16.7.8 and iPadOS 16.7.8, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, tvOS 17.5, visionOS 1.2. Processing a file may lead to unexpected app termination or arbitrary code execution.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/120896 | Vendor Advisory Release Notes |
| https://support.apple.com/en-us/120898 | Vendor Advisory Release Notes |
| https://support.apple.com/en-us/120901 | Vendor Advisory Release Notes |
| https://support.apple.com/en-us/120902 | Vendor Advisory Release Notes |
| https://support.apple.com/en-us/120903 | Vendor Advisory Release Notes |
| https://support.apple.com/en-us/120905 | Vendor Advisory Release Notes |
| https://support.apple.com/en-us/120906 | Vendor Advisory Release Notes |
Configurations
Configuration 1 (hide)
|
History
14 Mar 2025, 13:42
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.apple.com/en-us/120896 - Vendor Advisory, Release Notes | |
| References | () https://support.apple.com/en-us/120898 - Vendor Advisory, Release Notes | |
| References | () https://support.apple.com/en-us/120901 - Vendor Advisory, Release Notes | |
| References | () https://support.apple.com/en-us/120902 - Vendor Advisory, Release Notes | |
| References | () https://support.apple.com/en-us/120903 - Vendor Advisory, Release Notes | |
| References | () https://support.apple.com/en-us/120905 - Vendor Advisory, Release Notes | |
| References | () https://support.apple.com/en-us/120906 - Vendor Advisory, Release Notes | |
| CPE | cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
|
| First Time |
Apple macos
Apple ipados Apple visionos Apple tvos Apple Apple iphone Os Apple watchos Apple safari |
16 Jan 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-94 | |
| Summary |
|
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
15 Jan 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-15 20:15
Updated : 2025-03-14 13:42
NVD link : CVE-2024-27856
Mitre link : CVE-2024-27856
CVE.ORG link : CVE-2024-27856
JSON object : View
Products Affected
apple
- watchos
- macos
- visionos
- tvos
- safari
- ipados
- iphone_os
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')