Product:
iOS
Summary
The issue was addressed with improved bounds checks. An app may be able to corrupt coprocessor memory. This vulnerability could lead to significant impacts on confidentiality, integrity, and availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2024-44238 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a vulnerable device. The app could manipulate memory in a way that allows it to corrupt coprocessor memory, potentially leading to unauthorized access or control over sensitive data.
Affected Products
- iOS 18.1: The latest version that addresses the vulnerability.
- iPadOS 18.1: The latest version for iPads that resolves the issue.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of iOS and iPadOS. Regularly applying updates ensures that known vulnerabilities are patched and reduces the risk of exploitation.