Skip to content
fr Sign in
7.5 High

CVE-2024-23280 An injection issue was addressed with improved validation

Description

An injection issue was addressed with improved validation. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. A maliciously crafted webpage may be able to fingerprint the user.

Affected products and versions

Product Affected versions Fixed in
tvOS 17.4 earliest → < 17.4 17.4
iOS and iPadOS 17.4 earliest → < 17.4 17.4
Safari 17.4 earliest → < 17.4 17.4
macOS 14.4 earliest → < 14.4 14.4
watchOS 10.4 earliest → < 10.4 10.4
iOS 17.4 earliest → < 17.4 17.4
iPadOS 17.4 earliest → < 17.4 17.4

References

Timeline

  1. Published
  2. Last modified

Other CVEs of tvOS

The 1386 CVEs of tvOS →
CVE-2026-86972 A buffer overflow was addressed with improved size validation 7.8 High CVE-2026-113912 An out-of-bounds access issue was addressed with improved bounds checking 7.1 High CVE-2026-86964 A null pointer dereference was addressed with improved input validation 7.5 High CVE-2026-113904 A use-after-free issue was addressed with improved memory management 4.3 Medium
Track this CVE