4.6
Medium
CVE-2024-23293 This issue was addressed through improved state management
Description
This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. An attacker with physical access may be able to use Siri to access sensitive user data.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| tvOS 17.4 | earliest → < 17.4 | 17.4 |
| iOS and iPadOS 17.4 | earliest → < 17.4 | 17.4 |
| macOS 14.4 | earliest → < 14.4 | 14.4 |
| watchOS 10.4 | earliest → < 10.4 | 10.4 |
Other CVEs of tvOS
The 1386 CVEs of tvOS →
CVE-2026-86972
A buffer overflow was addressed with improved size validation
7.8
High
CVE-2026-113912
An out-of-bounds access issue was addressed with improved bounds checking
7.1
High
CVE-2026-86964
A null pointer dereference was addressed with improved input validation
7.5
High
CVE-2026-113904
A use-after-free issue was addressed with improved memory management
4.3
Medium