Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.3
CVE-2024-27840: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Ventura 13.6.7, tvOS 17.5, visionO...
CVE-2024-27840 · published 2 years ago
Summary
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.2, watchOS 10.5. An attacker that has already achieved kernel code execution may be able to bypass ...
What to do
- Update apple tvos to version 17.5 or later.
- Update apple visionos to version 1.2 or later.
- Update apple watchos to version 10.5 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | ipados |
< 16.7.8 >= 17.0, < 17.5 cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
| apple | iphone_os |
< 16.7.8 >= 17.0, < 17.5 cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| apple | macos |
>= 12.0, < 12.7.5 >= 13.0, < 13.6.7 cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
| apple | tvos |
< 17.5 cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* |
| apple | visionos |
< 1.2 cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* |
| apple | watchos |
< 10.5 cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* |
Original advisory text
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Ventura 13.6.7, tvOS 17.5, visionO...
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Ventura 13.6.7, tvOS 17.5, visionOS 1.2, watchOS 10.5. An attacker that has already achieved kernel code execution may be able to bypass kernel memory protections.
References
- https://support.apple.com/en-us/120898
- https://support.apple.com/en-us/120899
- https://support.apple.com/en-us/120900
- https://support.apple.com/en-us/120901
- https://support.apple.com/en-us/120902
- https://support.apple.com/en-us/120905
- https://support.apple.com/en-us/120906
- http://seclists.org/fulldisclosure/2024/Jun/5 Mailing List Third Party Advisory
- https://support.apple.com/en-us/HT214100 Vendor Advisory
- https://support.apple.com/en-us/HT214101 Vendor Advisory
- https://support.apple.com/en-us/HT214102 Vendor Advisory
- https://support.apple.com/en-us/HT214104 Vendor Advisory
- https://support.apple.com/en-us/HT214105 Vendor Advisory
- https://support.apple.com/en-us/HT214107 Vendor Advisory
- https://support.apple.com/en-us/HT214108 Vendor Advisory
- https://support.apple.com/kb/HT214100 Vendor Advisory
- https://support.apple.com/kb/HT214101 Vendor Advisory
- https://support.apple.com/kb/HT214102 Vendor Advisory
- https://support.apple.com/kb/HT214104 Vendor Advisory
- https://support.apple.com/kb/HT214105 Vendor Advisory
- https://support.apple.com/kb/HT214107 Vendor Advisory
- https://support.apple.com/kb/HT214108 Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-786Access of Memory Location Before Start of Buffer
Timeline
Published10 Jun 2024
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2024-27840 · NVD
Track software like this
Free during beta