Skip to content
fr Sign in
8.8 High

CVE-2024-54505 A type confusion issue was addressed with improved memory handling

Description

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to memory corruption.

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitable remotely over the network, without an account and if a user takes an action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Network
Attack complexity
Low
Privileges required
None
Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected products and versions

Product Affected versions Fixed in
tvOS 18.2 earliest → < 18.2 18.2
visionOS 2.2 earliest → < 2.2 2.2
macOS 15.2 earliest → < 15.2 15.2
watchOS 11.2 earliest → < 11.2 11.2
iPadOS 17.7 earliest → < 17.7.3 17.7.3
iOS and iPadOS 18.2 earliest → < 18.2 18.2
Safari 18.2 earliest → < 18.2 18.2

References

Timeline

  1. Published
  2. Last modified

Other CVEs of tvOS

The 1386 CVEs of tvOS →
CVE-2026-86972 A buffer overflow was addressed with improved size validation 7.8 High CVE-2026-113912 An out-of-bounds access issue was addressed with improved bounds checking 7.1 High CVE-2026-86964 A null pointer dereference was addressed with improved input validation 7.5 High CVE-2026-113904 A use-after-free issue was addressed with improved memory management 4.3 Medium
Track this CVE