BIT-jre-2024-54534: Critical severity Apple WatchOS vulnerability

Q: Which Apple platforms have fixes available?

The issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2, and iPadOS 18.2.

Q: What does exploitation require?

An attacker needs a target to process maliciously crafted web content. The supplied severity vector indicates network-based exploitation with low attack complexity and no required privileges or user interaction.

Q: What is the potential impact of successful exploitation?

Processing the crafted web content may cause memory corruption. The provided severity vector rates the potential impact as high for confidentiality, integrity, and availability.

Published Dec 12, 2024

Updated

The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption.

Affected Software

7 affected components

Apple WatchOS<11.2

Apple visionOS<2.2

Apple tvOS<18.2

Apple macOS Sequoia<15.2

Apple Safari<18.2

Apple iOS<18.2

Apple iPadOS<18.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in watchOS 11.2
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in visionOS 2.2
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in tvOS 18.2
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in macOS Sequoia 15.2
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in Safari 18.2
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in iOS 18.2
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in iPadOS 18.2

Event History

Dec 12, 2024

CVE Published

via OSV·02:15 AM

Data Sourced

via OSV·02:15 AM

DescriptionSeverity

Frequently Asked Questions

Which Apple platforms have fixes available?

The issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2, and iPadOS 18.2.

What does exploitation require?

An attacker needs a target to process maliciously crafted web content. The supplied severity vector indicates network-based exploitation with low attack complexity and no required privileges or user interaction.

What is the potential impact of successful exploitation?

Processing the crafted web content may cause memory corruption. The provided severity vector rates the potential impact as high for confidentiality, integrity, and availability.

BIT-jre-2024-54534: Critical severity Apple WatchOS vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which Apple platforms have fixes available?

What does exploitation require?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which Apple platforms have fixes available?

What does exploitation require?

What is the potential impact of successful exploitation?