CVE-2024-44131 — Apple / iOS and iPadOS

CVE-2024-44131

Apple / iOS and iPadOS PUBLISHED

Description (CNA)

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to access sensitive user data.

Affected (CNA)

Vendor / product	Versions
Apple / iOS and iPadOS	affected 0 before 18
Apple / macOS	affected 0 before 15

CWE

No CWE identifiers supplied.

References

https://support.apple.com/en-us/121238
https://support.apple.com/en-us/121250

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2024/Sep/33
http://seclists.org/fulldisclosure/2024/Sep/32