CVE-2024-44157

published 2024-10-11

CVE-2024-44157: A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 for Windows, iTunes 12.13.3 for Windows…

medium 5.5 CVSS 3.1

AV L AC L PR N UI R S U C N I N A H

A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 for Windows, iTunes 12.13.3 for Windows. Parsing a maliciously crafted video file may lead to unexpected system termination.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
apple	apple_tv	< 1.5.0	1.5.0
apple	apple_tv	< 1.5.0.152	1.5.0.152
apple	apple_tv_1.5.0.152_for_windows	—	—
apple	itunes	< 12.13.3	12.13.3
apple	itunes_12.13.3_for_windows	—	—
apple	itunes_for_windows	< 12.13.3	12.13.3

CWE-787 CWE-120