high
7.5
CWE
119 362 20 190
Advisory Published
CVE Published
Updated

CVE-2024-27879: Buffer Overflow

First published: Mon Sep 16 2024(Updated: )

Accessibility. This issue was addressed by restricting options offered on a locked device.

Credit: product-security@apple.com Jake Derouin Holger Fuhrmannek Snoolie Keffaber @0xilis Denis Tokarev @illusionofcha0s Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef Rodolphe BRUNETTI @eisw0lf Olivier Levon Anamika Adhikari Kirin @Pwnrin Kirin @Pwnrin NorthSealuckyu @uuulucky NorthSeaMickey Jin @patch1t Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Holger Fuhrmannek Snoolie Keffaber @0xilis Denis Tokarev @illusionofcha0s Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef Rodolphe BRUNETTI @eisw0lf Olivier Levon Anamika Adhikari Kirin @Pwnrin Kirin @Pwnrin NorthSealuckyu @uuulucky NorthSeaMickey Jin @patch1t Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Snoolie Keffaber @0xilis Denis Tokarev @illusionofcha0s Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef Rodolphe BRUNETTI @eisw0lf Olivier Levon Anamika Adhikari Kirin @Pwnrin Kirin @Pwnrin NorthSealuckyu @uuulucky NorthSeaMickey Jin @patch1t Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef Rodolphe BRUNETTI @eisw0lf Olivier Levon Anamika Adhikari Kirin @Pwnrin Kirin @Pwnrin NorthSealuckyu @uuulucky NorthSeaMickey Jin @patch1t Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Rodolphe BRUNETTI @eisw0lf Olivier Levon Anamika Adhikari Kirin @Pwnrin Kirin @Pwnrin NorthSealuckyu @uuulucky NorthSeaMickey Jin @patch1t Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Denis Tokarev @illusionofcha0s Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef Rodolphe BRUNETTI @eisw0lf Olivier Levon Anamika Adhikari Kirin @Pwnrin Kirin @Pwnrin NorthSealuckyu @uuulucky NorthSeaMickey Jin @patch1t Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef Rodolphe BRUNETTI @eisw0lf Olivier Levon Anamika Adhikari Kirin @Pwnrin Kirin @Pwnrin NorthSealuckyu @uuulucky NorthSeaMickey Jin @patch1t Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Olivier Levon Anamika Adhikari Kirin @Pwnrin Kirin @Pwnrin NorthSealuckyu @uuulucky NorthSeaMickey Jin @patch1t Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef Rodolphe BRUNETTI @eisw0lf Olivier Levon Anamika Adhikari Kirin @Pwnrin Kirin @Pwnrin NorthSealuckyu @uuulucky NorthSeaMickey Jin @patch1t Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef Rodolphe BRUNETTI @eisw0lf Olivier Levon Anamika Adhikari Kirin @Pwnrin Kirin @Pwnrin NorthSealuckyu @uuulucky NorthSeaMickey Jin @patch1t Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Anamika Adhikari Kirin @Pwnrin Kirin @Pwnrin NorthSealuckyu @uuulucky NorthSeaMickey Jin @patch1t Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Kirin @Pwnrin NorthSealuckyu @uuulucky NorthSeaMickey Jin @patch1t Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Kirin @Pwnrin Kirin @Pwnrin NorthSealuckyu @uuulucky NorthSeaMickey Jin @patch1t Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Mickey Jin @patch1t Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef Rodolphe BRUNETTI @eisw0lf Olivier Levon Anamika Adhikari Kirin @Pwnrin Kirin @Pwnrin NorthSealuckyu @uuulucky NorthSeaMickey Jin @patch1t Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Justin Cohen Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology Bhopal IndiaChloe Surett Jake Derouin Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology Bhopal IndiaHolger Fuhrmannek Tuan D. Hoang Snoolie Keffaber @0xilis an anonymous researcher Daniele Antonioli @08Tc3wBB JamfDenis Tokarev @illusionofcha0s Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Chloe Surett Jake Derouin Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology Bhopal IndiaHolger Fuhrmannek Tuan D. Hoang Snoolie Keffaber @0xilis an anonymous researcher Daniele Antonioli @08Tc3wBB JamfDenis Tokarev @illusionofcha0s Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Jake Derouin Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology Bhopal IndiaHolger Fuhrmannek Tuan D. Hoang Snoolie Keffaber @0xilis an anonymous researcher Daniele Antonioli @08Tc3wBB JamfDenis Tokarev @illusionofcha0s Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Snoolie Keffaber @0xilis an anonymous researcher Daniele Antonioli @08Tc3wBB JamfDenis Tokarev @illusionofcha0s Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Holger Fuhrmannek Tuan D. Hoang Snoolie Keffaber @0xilis an anonymous researcher Daniele Antonioli @08Tc3wBB JamfDenis Tokarev @illusionofcha0s Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers an anonymous researcher Daniele Antonioli @08Tc3wBB JamfDenis Tokarev @illusionofcha0s Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Daniele Antonioli @08Tc3wBB JamfDenis Tokarev @illusionofcha0s Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Tuan D. Hoang Snoolie Keffaber @0xilis an anonymous researcher Daniele Antonioli @08Tc3wBB JamfDenis Tokarev @illusionofcha0s Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology Bhopal IndiaHolger Fuhrmannek Tuan D. Hoang Snoolie Keffaber @0xilis an anonymous researcher Daniele Antonioli @08Tc3wBB JamfDenis Tokarev @illusionofcha0s Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers @08Tc3wBB JamfDenis Tokarev @illusionofcha0s Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Denis Tokarev @illusionofcha0s Junsung Lee dw0r ZeroPointer Lab working with Trend Micro Zero Day Initiativean anonymous researcher Antonio Zekić Andrew Lytvynov Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Rodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers 냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef OSS-Fuzz Google Project ZeroNed Williamson Google Project ZeroRodolphe BRUNETTI @eisw0lf Olivier Levon CVE-2023-5841 Alexander Heinrich SEEMOO DistriNet KU Leuven @vanhoefm TU Darmstadt @Sn0wfreeze Mathy Vanhoef ajajfxhj Bistrit Dahal an anonymous researcher Joshua Keller an anonymous researcher Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Kenneth Chew Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Chi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Om Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Anamika Adhikari Csaba Fitzl @theevilbit Kandji냥냥 Wojciech Regula SecuRingOm Kothawade Zaprico DigitalOmar A. Alanis the UNTHSC College of PharmacyChi Yuan Chang ZUSO ARTtaikosoup Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers Srijan Poudel Bistrit Dahal K宝 LFY @secsys Smi1e yulige Cristian Dinca (icmd.tech) Rodolphe BRUNETTI @eisw0lf Bohdan Stasiuk @Bohdan_Stasiuk Justin Cohen Ron Masas Narendra Bhati Cyber Security at Suma Soft PvtManager Cyber Security at Suma Soft PvtPune (India) Domien Schepers

Affected SoftwareAffected VersionHow to fix
Apple iPadOS<17.7
Apple iPhone OS<17.7
<17.7
17.7
<17.7
17.7
Apple iOS<18
18
Apple iPadOS<18
18

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Peer vulnerabilities

(Found alongside the following vulnerabilities)

Frequently Asked Questions

  • What is the severity of CVE-2024-27879?

    CVE-2024-27879 has a high severity rating as it impacts data protection and accessibility features.

  • How do I fix CVE-2024-27879?

    To fix CVE-2024-27879, update your Apple iOS or iPadOS to version 17.7 or later.

  • Which devices are affected by CVE-2024-27879?

    CVE-2024-27879 affects iPhones and iPads running iOS and iPadOS versions prior to 17.7.

  • What type of vulnerability is CVE-2024-27879?

    CVE-2024-27879 is primarily an accessibility vulnerability that also affects state management and data protection.

  • What changes were made to address CVE-2024-27879?

    CVE-2024-27879 was addressed by implementing improved checks and better state management options.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203