vulnerability

OS X update for ImageIO (CVE-2024-27880)

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:N/I:N/A:C)

Published

Sep 17, 2024

Added

Oct 31, 2024

Modified

Apr 6, 2026

Description

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, tvOS 18, visionOS 2, watchOS 11. Processing a maliciously crafted file may lead to unexpected app termination.

Solutions

apple-osx-upgrade-14_7apple-osx-upgrade-15

References

CVE-2024-27880
https://attackerkb.com/topics/CVE-2024-27880
CWE-125
EUVD-EUVD-2024-25073
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25073
https://support.apple.com/en-us/121238
https://support.apple.com/en-us/121247

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report