First published: Wed Dec 11 2024(Updated: )
Accounts. A logic issue was addressed with improved file handling.
Credit: Benjamin Hornbeck ZUSO ARTSkadz @skadz108 ZUSO ARTChi Yuan Chang ZUSO ARTtaikosoup Arsenii Kostromin (0x3c3e) an anonymous researcher Mickey Jin @patch1t Micheal Chukwu Smi1e @Smi1eSEC Bistrit Dahal Hossein Lotfi @hosselot Trend Micro Zero Day InitiativeGary Kwong Anonymous Trend Micro Zero Day InitiativeJunsung Lee Trend Micro Zero Day InitiativeYe Zhang @VAR10CK Baidu SecurityJoseph Ravichandran @0xjprx MIT CSAILsohybbyk CVE-2024-45490 风沐云烟 @binary_fmyy Abhay Kailasia @abhay_kailasia CRakeshkumar Talaviya Talal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncJacob Braun Rei @reizydev Kenneth Chew Michael DePlante @izobashi Trend Micro's Zero Day InitiativeCVE-2024-45306 Seunghyun Lee Brendon Tiszka Google Project Zerolinjy HKUS3Labchluo WHUSecLabXiangwei Zhang Tencent Security YUNDING LABTashita Software Security Lukas Bernhard product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS, iPadOS, and watchOS | <11.2 | |
Apple iOS, iPadOS, and watchOS | <18.2 | |
Apple iOS, iPadOS, and watchOS | <18.2 | |
Apple iOS, iPadOS, and watchOS | <18.2 | 18.2 |
Apple iOS, iPadOS, and watchOS | <18.2 | 18.2 |
Apple iOS, iPadOS, and watchOS | <11.2 | 11.2 |
Apple iOS, iPadOS, and watchOS | <18.2 | |
iStyle @cosme iPhone OS | <18.2 | |
Apple iOS, iPadOS, and watchOS | <11.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
The severity of CVE-2024-54512 is classified as moderate, indicating an important issue that could affect user experience.
To fix CVE-2024-54512, ensure that you update your Apple device to the latest version of watchOS, iOS, or iPadOS.
CVE-2024-54512 affects Apple watchOS versions up to 11.2 and iOS/iPadOS versions up to 18.2.
CVE-2024-54512 involves a logic issue that was addressed through improved file handling and state management.
There are no specific workarounds recommended for CVE-2024-54512; applying the software update is the primary resolution.