NVD Vulnerability Detail

CVE-2024-27857

Summary	An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in visionOS 1.2, macOS Sonoma 14.5, tvOS 17.5, iOS 17.5 and iPadOS 17.5. A remote attacker may be able to cause unexpected app termination or arbitrary code execution.
Publication Date	June 11, 2024, 6:15 a.m.
Registration Date	June 11, 2024, 10 a.m.
Last Update	Nov. 21, 2024, 6:05 p.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://seclists.org/fulldisclosure/2024/Jun/5	Mailing List Third Party Advisory
2	http://seclists.org/fulldisclosure/2024/Jun/5	Mailing List Third Party Advisory
3	https://support.apple.com/en-us/HT214101	Vendor Advisory
4	https://support.apple.com/en-us/HT214101	Vendor Advisory
5	https://support.apple.com/en-us/HT214102	Vendor Advisory
6	https://support.apple.com/en-us/HT214102	Vendor Advisory
7	https://support.apple.com/en-us/HT214106	Vendor Advisory
8	https://support.apple.com/en-us/HT214106	Vendor Advisory
9	https://support.apple.com/en-us/HT214108	Vendor Advisory
10	https://support.apple.com/en-us/HT214108	Vendor Advisory
11	https://support.apple.com/kb/HT214101	Vendor Advisory
12	https://support.apple.com/kb/HT214101	Vendor Advisory
13	https://support.apple.com/kb/HT214102	Vendor Advisory
14	https://support.apple.com/kb/HT214102	Vendor Advisory
15	https://support.apple.com/kb/HT214106	Vendor Advisory
16	https://support.apple.com/kb/HT214106	Vendor Advisory
17	https://support.apple.com/kb/HT214108	Vendor Advisory
18	https://support.apple.com/kb/HT214108	Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

JVN Vulnerability Information

複数のアップル製品におけるバッファエラーの脆弱性

Title	複数のアップル製品におけるバッファエラーの脆弱性
Summary	iPadOS、iOS、macOS 等複数のアップル製品には、バッファエラーの脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	May 13, 2024, midnight
Registration Date	July 4, 2024, 2:18 p.m.
Last Update	July 4, 2024, 2:18 p.m.

Affected System

アップル

iOS 17.5 未満

iPadOS 17.5 未満

macOS 14.0 以上 14.5 未満

tvOS 17.5 未満

visionos 1.2 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2024-27857	https://www.cve.org/CVERecord?id=CVE-2024-27857
National Vulnerability Database (NVD)
2	CVE-2024-27857	https://nvd.nist.gov/vuln/detail/CVE-2024-27857

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
Apple Security Updates
1	HT214101	https://support.apple.com/en-us/HT214101
2	HT214102	https://support.apple.com/en-us/HT214102
3	HT214106	https://support.apple.com/en-us/HT214106
4	HT214108	https://support.apple.com/en-us/HT214108
Apple セキュリティアップデート
5	HT214101	https://support.apple.com/ja-jp/HT214101
6	HT214102	https://support.apple.com/ja-jp/HT214102
7	HT214106	https://support.apple.com/ja-jp/HT214106
8	HT214108	https://support.apple.com/ja-jp/HT214108

その他

No	Name	URL
関連文書
1	seclists.org (Jun/5)	http://seclists.org/fulldisclosure/2024/Jun/5

Change Log

No	Changed Details	Date of change
1	[2024年07月04日] 掲載	July 4, 2024, 2:17 p.m.