CVE-2024-44252
published 2024-10-28CVE-2024-44252: A logic issue was addressed with improved file handling. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, tvOS 18.1, visionOS…
PriorityP429high7.1CVSS 3.1
AVLACLPRNUIRSUCNIHAH
EPSS
0.30%
22.4th percentile
A logic issue was addressed with improved file handling. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, tvOS 18.1, visionOS 2.1. Restoring a maliciously crafted backup file may lead to modification of protected system files.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_17.7.1_and_ipados | — | — |
| apple | ios_18.1_and_ipados | — | — |
| apple | ios_and_ipados | < 17.7.1 | 17.7.1 |
| apple | ios_and_ipados | < 18.1 | 18.1 |
| apple | ipados | < 17.7.1 | 17.7.1 |
| apple | ipados | >= 18.0 < 18.1 | 18.1 |
| apple | iphone_os | < 17.7.1 | 17.7.1 |
| apple | iphone_os | >= 18.0 < 18.1 | 18.1 |
| apple | tvos | < 18.1 | 18.1 |
| apple | tvos18.1 | — | — |
| apple | visionos | < 2.1 | 2.1 |
| apple | visionos2.1 | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2024-44252: visionOS2.1
vendor_apple·2024-10-28·CVSS 7.1
CVE-2024-44252 [HIGH] CVE-2024-44252: visionOS2.1
Apple Security Update: About the security content of visionOS2.1
Product: visionOS2.1
CVE: CVE-2024-44252
Component: MobileBackup
Impact: Restoring a maliciously crafted backup file may lead to modification of protected system files
Description: A logic issue was addressed with improved file handling.
Apple
CVE-2024-44252: iOS 18.1 and iPadOS 18.1
vendor_apple·2024-10-28·CVSS 7.1
CVE-2024-44252 [HIGH] CVE-2024-44252: iOS 18.1 and iPadOS 18.1
Apple Security Update: About the security content of iOS 18.1 and iPadOS 18.1
Product: iOS 18.1 and iPadOS
Version: 18.1
CVE: CVE-2024-44252
Component: MobileBackup
Impact: Restoring a maliciously crafted backup file may lead to modification of protected system files
Description: A logic issue was addressed with improved file handling.
Apple
CVE-2024-44252: tvOS18.1
vendor_apple·2024-10-28·CVSS 7.1
CVE-2024-44252 [HIGH] CVE-2024-44252: tvOS18.1
Apple Security Update: About the security content of tvOS18.1
Product: tvOS18.1
CVE: CVE-2024-44252
Component: MobileBackup
Impact: Restoring a maliciously crafted backup file may lead to modification of protected system files
Description: A logic issue was addressed with improved file handling.
Apple
CVE-2024-44252: iOS 17.7.1 and iPadOS 17.7.1
vendor_apple·2024-10-28·CVSS 7.1
CVE-2024-44252 [HIGH] CVE-2024-44252: iOS 17.7.1 and iPadOS 17.7.1
Apple Security Update: About the security content of iOS 17.7.1 and iPadOS 17.7.1
Product: iOS 17.7.1 and iPadOS
Version: 17.7.1
CVE: CVE-2024-44252
Component: MobileBackup
Impact: Restoring a maliciously crafted backup file may lead to modification of protected system files
Description: A logic issue was addressed with improved file handling.
GHSA
GHSA-wvfr-r5jg-p8ff: A logic issue was addressed with improved file handling
ghsa_unreviewed·2024-10-28
CVE-2024-44252 [HIGH] GHSA-wvfr-r5jg-p8ff: A logic issue was addressed with improved file handling
A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, tvOS 18.1. Restoring a maliciously crafted backup file may lead to modification of protected system files.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://support.apple.com/en-us/121563https://support.apple.com/en-us/121566https://support.apple.com/en-us/121567https://support.apple.com/en-us/121569http://seclists.org/fulldisclosure/2024/Oct/10http://seclists.org/fulldisclosure/2024/Oct/15http://seclists.org/fulldisclosure/2024/Oct/16http://seclists.org/fulldisclosure/2024/Oct/9
2024-10-28
Published