CVE-2024-54505(apple / ipados)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing maliciously crafted web content may lead to memory corruption.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-843

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • ipados
  • iphone_os
  • macos
  • safari

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
Products
ipadosiphone_osmacossafaritvosvisionoswatchos

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-25: 110-25
Full discourse1 post
  • ウグイス宿@ashinowoto

    まずios18のSafari限定の脆弱性を調べさせて、種類ごとにわけるやろ…? メモリ破壊・RCE系 【メモリ管理・領域逸脱系】 1-1、バッファオーバーフロー 1-1-1、CVE-2025-14174 [CVSS: 8.8 (High)] 1-1-2、CVE-2025-24154 [CVSS: 8.8 (High)] 1-1-3、CVE-2025-43300 [CVSS: 9.8 (Critical)] 1-2、Use-After-Free 1-2-1、CVE-2025-24158 [CVSS: 8.8 (High)] 1-2-2、CVE-2025-24189 [CVSS: 8.8 (High)] 1-2-3、CVE-2025-31278 [CVSS: 8.8 (High)] 1-2-4、CVE-2025-43529 [CVSS: 9.8 (Critical)] 【スクリプト実行エンジン・コンパイラ系】 2-1、JavaScriptCore JITコンパイラ最適化不備(JIT / DFG) 2-1-1、CVE-2024-44308 [CVSS: 8.8 (High)] 2-1-2、CVE-2024-54505 [CVSS: 8.8 (High)] 2-1-3、CVE-2024-54543 [CVSS: 8.8 (High)] 2-1-4、CVE-2025-24128 [CVSS: 8.8 (High)] 2-1-5、CVE-2025-3312 [CVSS: 8.8 (High)] 2-2、型混同・オブジェクト状態管理不備(Type Confusion / State) 2-2-1、CVE-2025-24201 [CVSS: 8.8 (High)] 2-2-2、CVE-2025-31273 [CVSS: 8.8 (High)] 2-2-3、CVE-2025-31277 [CVSS: 8.8 (High)] 2-2-4、CVE-2025-43212 [CVSS: 8.8 (High)] 2-2-5、CVE-2025-43213 [CVSS: 8.8 (High)] 【クロスサイト・データ漏洩型(Cross-Origin / Information Disclosure)】 1、スクリプト実行・状態管理系 1-1、ステート・クッキー処理不備によるスクリプト実行(XSS) 1-1-1、CVE-2024-44309 [CVSS: 8.8 (High)] 2、データ保護隔離系 2-1、オリジン隔離の追跡不備によるデータ奪取(Cross-Origin Exfiltration) 2-1-1、CVE-2024-54467 [CVSS: 8.8 (High)] 【セキュリティ制限バイパス型(Policy / Sandbox Bypass)】 1、コンテンツアクセス制御系 1-1、Content Security Policy(CSP)制限回避 1-1-1、CVE-2024-44296 [CVSS: 8.8 (High)] 2、ブラウザプロセス制御系 2-1、レンダラー・プロセス間制御バイパス 2-1-1、CVE-2024-54479 [CVSS: 8.5 (High)]

    000612.3K
    76.1K followersView on X
CPE platform detail7 entries

7 of 7 entries

PartVendorProductVersionTarget SWTarget HW
OSappleipados---
OSappleiphone_os---
OSapplemacos---
Appapplesafari---
OSappletvos---
OSapplevisionos---
OSapplewatchos---

Explore more