fr Sign in

8.4 High

CVE-2024-23288 This issue was addressed by removing the vulnerable code

Description

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An app may be able to elevate privileges.

Affected products and versions

Product	Affected versions	Fixed in
tvOS 17.4	earliest → < 17.4	17.4
iOS and iPadOS 17.4	earliest → < 17.4	17.4
macOS 14.4	earliest → < 14.4	14.4
watchOS 10.4	earliest → < 10.4	10.4
iphone_os 17.4	earliest → < 17.4	17.4
ipad_os 17.4	earliest → < 17.4	17.4

References

support.apple.com support.apple.com
support.apple.com support.apple.com
support.apple.com support.apple.com
support.apple.com support.apple.com

Timeline

Published March 8, 2024
Last modified April 2, 2026

The 1386 CVEs of tvOS →

CVE-2026-86972 A buffer overflow was addressed with improved size validation 7.8 High CVE-2026-113912 An out-of-bounds access issue was addressed with improved bounds checking 7.1 High CVE-2026-86964 A null pointer dereference was addressed with improved input validation 7.5 High CVE-2026-113904 A use-after-free issue was addressed with improved memory management 4.3 Medium

Track this CVE