CVE-2024-54564
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 21, 2025
Updated: Mar 25, 2025
CWE ID 276
Summary
CVE-2024-54564 is a vulnerability affecting Apple's AirDrop feature. The issue stems from improper state management, which may result in a file received via AirDrop not having the quarantine flag applied. This flag is crucial for macOS, iOS, and iPadOS to identify and isolate potentially malicious files. Consequently, an attacker could exploit this vulnerability to execute unauthorized code on affected devices. The flaw has been addressed in version 1.3 of visionOS, 14.6 of macOS Sonoma, 17.6 of iOS, and 17.6 of iPadOS.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- iOS
- MacOS
- iPadOS
- Apple (iPhone OS)
Affected Vendors
- Apple