5.9
Moyenne
CVE-2024-23218 A timing side-channel issue was addressed with improvements to constant-time computation in cryptographic functions
Description
A timing side-channel issue was addressed with improvements to constant-time computation in cryptographic functions. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.4, macOS Sonoma 14.3, macOS Ventura 13.6.5, tvOS 17.3, watchOS 10.3. An attacker may be able to decrypt legacy RSA PKCS#1 v1.5 ciphertexts without having the private key.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| iOS and iPadOS 17.3 | premières → < 17.3 | 17.3 |
| iOS and iPadOS 16.7 | premières → < 16.7.6 | 16.7.6 |
| tvOS 17.3 | premières → < 17.3 | 17.3 |
| watchOS 10.3 | premières → < 10.3 | 10.3 |
| macOS 14.3 | premières → < 14.3 | 14.3 |
| macOS 13.6 | premières → < 13.6.5 | 13.6.5 |
| macOS 12.7 | premières → < 12.7.4 | 12.7.4 |
Autres CVE de iOS and iPadOS
Les 2049 CVE de iOS and iPadOS →
CVE-2026-86925
An authorization issue was addressed with improved state management
5.5
Moyenne
CVE-2026-84627
A buffer overflow was addressed with improved bounds checking
7.8
Élevée
CVE-2026-86972
A buffer overflow was addressed with improved size validation
7.8
Élevée
CVE-2026-113912
An out-of-bounds access issue was addressed with improved bounds checking
7.1
Élevée