Description
The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Parsing a maliciously crafted video file may lead to unexpected system termination.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | iOS and iPadOS | < 17.7.1, < 18.1 | 17.7.1 |
| Apple | macOS | < 13.7.1, < 14.7.1, < 15.1 | 13.7.1 |
| Apple | tvOS | < 18.1 | 18.1 |
| Apple | visionOS | < 2.1 | 2.1 |
| Apple | watchOS | < 11.1 | 11.1 |
Advisories 2
- WID-SEC-2024-3291 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 6, 2026
- WID-SEC-2024-3288 Apple iOS und iPadOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 19, 2024
References
- https://support.apple.com/en-us/121563
- https://support.apple.com/en-us/121564
- https://support.apple.com/en-us/121565
- https://support.apple.com/en-us/121566
- https://support.apple.com/en-us/121567
- https://support.apple.com/en-us/121568
- https://support.apple.com/en-us/121569
- https://support.apple.com/en-us/121570