CVE-2024-54507

A type confusion issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2. An attacker with user privileges may be able to read kernel memory.

Affected

Apple · iOS and iPadOS · macOS

CVSS v3.1 NVD

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v3.1 CNA

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS

0.89% chance of exploitation in the next 30 days, 59th percentile

Published

2025-01-27

Updated

2026-06-03

Proof-of-concept exploits (1)

• jprx/CVE-2024-545079★ · 2025-01-23

Security advisories

• https://support.apple.com/en-us/121837
• https://support.apple.com/en-us/121839

References

• CVE Record
• NVD entry

Related

• CVE-2022-29968
• CVE-2024-27815
• CVE-2025-24118