Skip to content
fr Sign in
7.5 High

CVE-2024-27820 The issue was addressed with improved memory handling

Description

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing web content may lead to arbitrary code execution.

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitable remotely over the network, without an account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Network
Attack complexity
High
Privileges required
None
Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected products and versions

Product Affected versions Fixed in
iOS and iPadOS 17.5 earliest → < 17.5 17.5
iOS and iPadOS 16.7 earliest → < 16.7.8 16.7.8
macOS 14.5 earliest → < 14.5 14.5
visionOS 1.2 earliest → < 1.2 1.2
watchOS 10.5 earliest → < 10.5 10.5
Safari 17.5 earliest → < 17.5 17.5
tvOS 17.5 earliest → < 17.5 17.5
iphone_os 17.5 earliest → < 17.5 17.5
iphone_os 16.7 earliest → < 16.7 16.7
Show the 3 other branches
Product Affected versions Fixed in
ipad_os 17.5 earliest → < 17.5 17.5
ipad_os 16.7 earliest → < 16.7 16.7
mac_os 14.5 earliest → < 14.5 14.5

References

Timeline

  1. Published
  2. Last modified

Other CVEs of iOS and iPadOS

The 2049 CVEs of iOS and iPadOS →
CVE-2026-86925 An authorization issue was addressed with improved state management 5.5 Medium CVE-2026-84627 A buffer overflow was addressed with improved bounds checking 7.8 High CVE-2026-86972 A buffer overflow was addressed with improved size validation 7.8 High CVE-2026-113912 An out-of-bounds access issue was addressed with improved bounds checking 7.1 High
Track this CVE