vulnerability

OS X update for ImageIO (CVE-2024-44297)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:N/A:C)

Published

Oct 28, 2024

Added

Oct 31, 2024

Modified

Apr 6, 2026

Description

The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Processing a maliciously crafted message may lead to a denial-of-service.

Solutions

apple-osx-upgrade-13_7_1apple-osx-upgrade-14_7_1apple-osx-upgrade-15_1

References

CVE-2024-44297
https://attackerkb.com/topics/CVE-2024-44297
EUVD-EUVD-2024-41006
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-41006
https://support.apple.com/en-us/121564
https://support.apple.com/en-us/121568
https://support.apple.com/en-us/121570

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report