CVE-2024-44281
MEDIUM EPSS 17.1%
Published Oct 28, 20241y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Published Oct 28, 2024 1y ago
Last Modified Jun 17, 2026 1w ago
Description
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. Parsing a file may lead to disclosure of user information.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality High
Integrity None
Availability None
Threat Intelligence
EPSS Exploit Probability
17.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-125 Out-of-bounds Read Memory Safety
Affected Products 2
References 6
- seclists.org http://seclists.org/fulldisclosure/2024/Oct/11
- seclists.org http://seclists.org/fulldisclosure/2024/Oct/12
- seclists.org http://seclists.org/fulldisclosure/2024/Oct/13
- support.apple.com https://support.apple.com/en-us/121564
- support.apple.com https://support.apple.com/en-us/121568
- support.apple.com https://support.apple.com/en-us/121570
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.