CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2024-23296: A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 17.4 and iPadOS 17.4. An attacker with arbitrary...

Description

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 17.4 and iPadOS 17.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

Classification

CVE ID: CVE-2024-23296

Affected Products

Vendor: Apple

Product: iOS and iPadOS

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.18% (probability of being exploited)

EPSS Percentile: 56.34% (scored less or equal to compared to others)

EPSS Date: 2025-03-14 (when was this score calculated)

References

Timeline

2025-02-14 00:31:37 UTC
CVE

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 17.4 and iPadOS 17.4. An attacker with arbitrary...