CVE-2024-54658

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Feb 10, 2025
Updated: Feb 11, 2025
CWE ID 770

Summary

CVE-2024-54658 is a recently identified vulnerability that impacts multiple Apple operating systems and web browsers. The issue revolves around insufficient memory handling, which, when triggered during the processing of web content, can lead to a denial-of-service condition. Users of iOS 17.3 and earlier, iPadOS 17.3 and earlier, Safari 17.3 and earlier, tvOS 17.3 and earlier, watchOS 10.3 and earlier, visionOS 1.0.1 and earlier, and macOS Sonoma 14.3 and earlier are affected. Apple has rectified this vulnerability with improved memory handling in iOS 17.4, iPadOS 17.4, Safari 17.4, tvOS 17.4, watchOS 10.4, visionOS 1.1, and macOS Sonoma 14.4.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share