CVE-2024-54494
published 2024-12-12CVE-2024-54494: A race condition was addressed with additional validation. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma…
PriorityP431medium5.9CVSS 3.1
AVNACHPRNUINSUCNIHAN
EPSS
0.78%
51.8th percentile
A race condition was addressed with additional validation. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. An attacker may be able to create a read-only memory mapping that can be written to.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios18.2_and_ipados18.2 | — | — |
| apple | ios_and_ipados | < 18.2 | 18.2 |
| apple | ipados | < 17.7.3 | 17.7.3 |
| apple | ipados | >= 18.0 < 18.2 | 18.2 |
| apple | ipados17.7.3 | — | — |
| apple | iphone_os | < 18.2 | 18.2 |
| apple | macos | < 14.7.2 | 14.7.2 |
| apple | macos | < 15.2 | 15.2 |
| apple | macos | < 13.7.2 | 13.7.2 |
| apple | macos | >= 14.0 < 14.7.2 | 14.7.2 |
| apple | macos | >= 15.0 < 15.2 | 15.2 |
| apple | macos_sequoia | — | — |
| apple | macossonoma14.7.2 | — | — |
| apple | macosventura13.7.2 | — | — |
| apple | tvos | < 18.2 | 18.2 |
| apple | tvos18.2 | — | — |
| apple | visionos | < 2.2 | 2.2 |
| apple | visionos2.2 | — | — |
| apple | watchos | < 11.2 | 11.2 |
| apple | watchos11.2 | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2024-54494: visionOS2.2
vendor_apple·2024-12-11·CVSS 5.9
CVE-2024-54494 [MEDIUM] CVE-2024-54494: visionOS2.2
Apple Security Update: About the security content of visionOS2.2
Product: visionOS2.2
CVE: CVE-2024-54494
Component: Kernel
Impact: An attacker may be able to create a read-only memory mapping that can be written to
Description: A race condition was addressed with additional validation.
Apple
CVE-2024-54494: macOSSonoma14.7.2
vendor_apple·2024-12-11·CVSS 5.9
CVE-2024-54494 [MEDIUM] CVE-2024-54494: macOSSonoma14.7.2
Apple Security Update: About the security content of macOSSonoma14.7.2
Product: macOSSonoma14.7.2
CVE: CVE-2024-54494
Component: Kernel
Impact: An attacker may be able to create a read-only memory mapping that can be written to
Description: A race condition was addressed with additional validation.
Apple
CVE-2024-54494: macOS Sequoia 15.2
vendor_apple·2024-12-11·CVSS 5.9
CVE-2024-54494 [MEDIUM] CVE-2024-54494: macOS Sequoia 15.2
Apple Security Update: About the security content of macOS Sequoia 15.2
Product: macOS Sequoia
Version: 15.2
CVE: CVE-2024-54494
Component: Kernel
Impact: An attacker may be able to create a read-only memory mapping that can be written to
Description: A race condition was addressed with additional validation.
Apple
CVE-2024-54494: watchOS11.2
vendor_apple·2024-12-11·CVSS 5.9
CVE-2024-54494 [MEDIUM] CVE-2024-54494: watchOS11.2
Apple Security Update: About the security content of watchOS11.2
Product: watchOS11.2
CVE: CVE-2024-54494
Component: Kernel
Impact: An attacker may be able to create a read-only memory mapping that can be written to
Description: A race condition was addressed with additional validation.
Apple
CVE-2024-54494: iPadOS17.7.3
vendor_apple·2024-12-11·CVSS 5.9
CVE-2024-54494 [MEDIUM] CVE-2024-54494: iPadOS17.7.3
Apple Security Update: About the security content of iPadOS17.7.3
Product: iPadOS17.7.3
CVE: CVE-2024-54494
Component: Kernel
Impact: An attacker may be able to create a read-only memory mapping that can be written to
Description: A race condition was addressed with additional validation.
Apple
CVE-2024-54494: tvOS18.2
vendor_apple·2024-12-11·CVSS 5.9
CVE-2024-54494 [MEDIUM] CVE-2024-54494: tvOS18.2
Apple Security Update: About the security content of tvOS18.2
Product: tvOS18.2
CVE: CVE-2024-54494
Component: Kernel
Impact: An attacker may be able to create a read-only memory mapping that can be written to
Description: A race condition was addressed with additional validation.
Apple
CVE-2024-54494: iOS18.2 and iPadOS18.2
vendor_apple·2024-12-11·CVSS 5.9
CVE-2024-54494 [MEDIUM] CVE-2024-54494: iOS18.2 and iPadOS18.2
Apple Security Update: About the security content of iOS18.2 and iPadOS18.2
Product: iOS18.2 and iPadOS18.2
CVE: CVE-2024-54494
Component: Kernel
Impact: An attacker may be able to create a read-only memory mapping that can be written to
Description: A race condition was addressed with additional validation.
Apple
CVE-2024-54494: macOSVentura13.7.2
vendor_apple·2024-12-11·CVSS 5.9
CVE-2024-54494 [MEDIUM] CVE-2024-54494: macOSVentura13.7.2
Apple Security Update: About the security content of macOSVentura13.7.2
Product: macOSVentura13.7.2
CVE: CVE-2024-54494
Component: Kernel
Impact: An attacker may be able to create a read-only memory mapping that can be written to
Description: A race condition was addressed with additional validation.
GHSA
GHSA-q7qj-rx6w-8pxw: A race condition was addressed with additional validation
ghsa_unreviewed·2024-12-12
CVE-2024-54494 [MEDIUM] CWE-362 GHSA-q7qj-rx6w-8pxw: A race condition was addressed with additional validation
A race condition was addressed with additional validation. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An attacker may be able to create a read-only memory mapping that can be written to.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://support.apple.com/en-us/121837https://support.apple.com/en-us/121838https://support.apple.com/en-us/121839https://support.apple.com/en-us/121840https://support.apple.com/en-us/121842https://support.apple.com/en-us/121843https://support.apple.com/en-us/121844https://support.apple.com/en-us/121845http://seclists.org/fulldisclosure/2024/Dec/10http://seclists.org/fulldisclosure/2024/Dec/12http://seclists.org/fulldisclosure/2024/Dec/6http://seclists.org/fulldisclosure/2024/Dec/7http://seclists.org/fulldisclosure/2024/Dec/8
2024-12-12
Published