CVE-2024-44218
published 2024-10-28CVE-2024-44218: This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma…
PriorityP337high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.30%
21.8th percentile
This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1. Processing a maliciously crafted file may lead to heap corruption.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_17.7.1_and_ipados | — | — |
| apple | ios_18.1_and_ipados | — | — |
| apple | ios_and_ipados | < 17.7.1 | 17.7.1 |
| apple | ios_and_ipados | < 18.1 | 18.1 |
| apple | ipados | < 17.7.1 | 17.7.1 |
| apple | ipados | — | — |
| apple | iphone_os | < 17.7.1 | 17.7.1 |
| apple | iphone_os | — | — |
| apple | macos | < 15.1 | 15.1 |
| apple | macos | < 14.7.1 | 14.7.1 |
| apple | macos_sequoia | — | — |
| apple | macos_sonoma | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ghsa8.6HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2024-44218: iOS 18.1 and iPadOS 18.1
vendor_apple·2024-10-28·CVSS 7.8
CVE-2024-44218 [HIGH] CVE-2024-44218: iOS 18.1 and iPadOS 18.1
Apple Security Update: About the security content of iOS 18.1 and iPadOS 18.1
Product: iOS 18.1 and iPadOS
Version: 18.1
CVE: CVE-2024-44218
Component: SceneKit
Impact: Processing a maliciously crafted file may lead to heap corruption
Description: This issue was addressed with improved checks.
Apple
CVE-2024-44218: iOS 17.7.1 and iPadOS 17.7.1
vendor_apple·2024-10-28·CVSS 7.8
CVE-2024-44218 [HIGH] CVE-2024-44218: iOS 17.7.1 and iPadOS 17.7.1
Apple Security Update: About the security content of iOS 17.7.1 and iPadOS 17.7.1
Product: iOS 17.7.1 and iPadOS
Version: 17.7.1
CVE: CVE-2024-44218
Component: SceneKit
Impact: Processing a maliciously crafted file may lead to heap corruption
Description: This issue was addressed with improved checks.
Apple
CVE-2024-44218: macOS Sonoma 14.7.1
vendor_apple·2024-10-28·CVSS 7.8
CVE-2024-44218 [HIGH] CVE-2024-44218: macOS Sonoma 14.7.1
Apple Security Update: About the security content of macOS Sonoma 14.7.1
Product: macOS Sonoma
Version: 14.7.1
CVE: CVE-2024-44218
Component: SceneKit
Impact: Processing a maliciously crafted file may lead to heap corruption
Description: This issue was addressed with improved checks.
Apple
CVE-2024-44218: macOS Sequoia 15.1
vendor_apple·2024-10-28·CVSS 7.8
CVE-2024-44218 [HIGH] CVE-2024-44218: macOS Sequoia 15.1
Apple Security Update: About the security content of macOS Sequoia 15.1
Product: macOS Sequoia
Version: 15.1
CVE: CVE-2024-44218
Component: SceneKit
Impact: Processing a maliciously crafted file may lead to heap corruption
Description: This issue was addressed with improved checks.
GHSA
ciguard: Container image runs as root (no USER directive)
ghsa·2026-05-05·CVSS 8.6
CVE-2026-44218 [HIGH] CWE-269 ciguard: Container image runs as root (no USER directive)
ciguard: Container image runs as root (no USER directive)
## Summary
The published `ghcr.io/jo-jo98/ciguard` container image inherits the default root user because the `Dockerfile` lacks a `USER` directive. ciguard is a static analyser with no need for root privileges; running as root inside a container makes any future container-runtime escape CVE more impactful than it needs to be.
## Threat scenario
Defence-in-depth gap. Without a known container-runtime CVE in the chain, this finding is not directly exploitable. Recent runc CVEs (e.g. CVE-2024-21626) provided escape primitives that depended on host UID = container UID = 0 for full impact; with this fix, any future such escape primitive lands as a non-root user on the host.
## Patch
- Dockerfile adds `RUN groupadd -r ciguard && us
GHSA
GHSA-pvm4-q7m8-9wqx: This issue was addressed with improved checks
ghsa_unreviewed·2024-10-28
CVE-2024-44218 [HIGH] CWE-120 GHSA-pvm4-q7m8-9wqx: This issue was addressed with improved checks
This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, macOS Sonoma 14.7.1, iOS 18.1 and iPadOS 18.1. Processing a maliciously crafted file may lead to heap corruption.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-10-28
Published