High WID-SEC-2024-3691 25 CVEs

Apple iOS und iPadOS: Mehrere Schwachstellen

Published Dec 11, 2024 · Updated May 12, 2025 · Revision 3 · de-DE

Vendor: Apple Product: iOS Product: iPadOS Platform: iOS

Summary

Ein Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen.

Product

Das Apple iOS (vormals iPhone OS) ist das Betriebssystem für das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch.
Das Apple iPadOS ist das Betriebssystem für das von Apple entwickelte iPad.

Vulnerabilities 25

Critical 9.8

CVE-2024-45490 Public exploit

An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer.

qt6-qtwebengine qt5-qtwebengine insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine Wolfi

Aug 30, 2024
Critical 9.8

CVE-2024-54492

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.2 and …

Apple macOS iOS and iPadOS visionOS macOS iOS

Dec 11, 2024
Critical 9.1

CVE-2024-54512

The issue was addressed by removing the relevant flags. This issue is fixed in iOS 18.2 and iPadOS 18.2, watchOS 11.2. …

Apple iOS and iPadOS watchOS iOS

Jan 27, 2025
High 8.8

CVE-2024-54505

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iP…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Dec 11, 2024
High 8.8

CVE-2024-54534

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iP…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Wolfi

Dec 11, 2024
High 8.2

CVE-2024-54514

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macO…

Apple macOS iOS and iPadOS watchOS macOS iOS

Dec 11, 2024
High 7.8

CVE-2024-44225

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS…

Apple macOS iOS and iPadOS watchOS macOS iOS

Dec 11, 2024
High 7.5

CVE-2024-54479

The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Dec 11, 2024
High 7.3

CVE-2024-44276

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in iOS 18.2 and …

Apple iOS and iPadOS iOS

Mar 17, 2025
High 7.1

CVE-2024-44245

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, …

Apple macOS iOS and iPadOS visionOS macOS iOS

Dec 11, 2024
Medium 6.5

CVE-2024-54486

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Seq…

Apple macOS iOS and iPadOS watchOS macOS iOS

Dec 11, 2024
Medium 6.5

CVE-2024-54502 EPSS 17%

The issue was addressed with improved checks. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Dec 11, 2024
Medium 6.5

CVE-2024-54508

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iP…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu

Dec 11, 2024
Medium 5.9

CVE-2024-54494

A race condition was addressed with additional validation. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7…

Apple macOS iOS and iPadOS watchOS macOS iOS

Dec 11, 2024
Medium 5.7

CVE-2024-54513

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS …

Apple macOS iOS and iPadOS watchOS macOS iOS

Dec 11, 2024
Medium 5.5

CVE-2024-44201

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iPadOS 17.7.3, …

Apple macOS iOS and iPadOS iPadOS macOS iOS

Dec 11, 2024
Medium 5.5

CVE-2024-54485

The issue was addressed by adding additional logic. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, mac…

Apple macOS iOS and iPadOS iPadOS macOS iOS

Dec 11, 2024
Medium 5.5

CVE-2024-54500

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Seq…

Apple macOS iOS and iPadOS watchOS macOS iOS

Dec 11, 2024
Medium 5.5

CVE-2024-54501

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Seq…

Apple macOS iOS and iPadOS watchOS macOS iOS

Dec 11, 2024
Medium 5.5

CVE-2024-54526

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macO…

Apple macOS iOS and iPadOS watchOS macOS iOS

Dec 11, 2024
Medium 5.5

CVE-2024-54527

This issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, mac…

Apple macOS iOS and iPadOS watchOS macOS iOS

Dec 11, 2024
Medium 5.5

CVE-2025-24091 Public exploit

An app could impersonate system notifications. Sensitive notifications now require restricted entitlements. This issue …

Apple iOS and iPadOS iPadOS iOS

Apr 30, 2025
Medium 5.1

CVE-2024-54510

A race condition was addressed with improved locking. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, m…

Apple macOS iOS and iPadOS watchOS macOS iOS

Dec 11, 2024
Medium 4.3

CVE-2024-44246

The issue was addressed with improved routing of Safari-originated requests. This issue is fixed in Safari 18.2, iOS 18…

Apple macOS iOS and iPadOS Safari macOS iOS Browsers

Dec 11, 2024
Low 3.3

CVE-2024-54503

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.2 and …

Apple iOS and iPadOS iOS

Dec 11, 2024

Revision history

2025-05-12 #3
CVE ergänzt
2025-03-27 #2
CVE-2024-44276, CVE-2024-54512 ergänzt
2024-12-11 #1
Initiale Fassung

References

Apple Security Announce vom 2024-12-11
https://lists.apple.com/archives/security-announce/2024/Dec/msg00000.html
Apple Security Announce vom 2024-12-11
https://lists.apple.com/archives/security-announce/2024/Dec/msg00001.html