CVE-2024-54525
published 2025-03-17CVE-2024-54525: A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS…
PriorityP345high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.57%
44.0th percentile
A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Restoring a maliciously crafted backup file may lead to modification of protected system files.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios18.2_and_ipados18.2 | — | — |
| apple | ios_and_ipados | < 18.2 | 18.2 |
| apple | ipados | < 18.2 | 18.2 |
| apple | iphone_os | < 18.2 | 18.2 |
| apple | macos | < 15.2 | 15.2 |
| apple | macos_sequoia | — | — |
| apple | tvos | < 18.2 | 18.2 |
| apple | tvos18.2 | — | — |
| apple | visionos | < 2.2 | 2.2 |
| apple | visionos2.2 | — | — |
| apple | watchos | < 11.2 | 11.2 |
| apple | watchos11.2 | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2024-54525: watchOS11.2
vendor_apple·2024-12-11·CVSS 8.8
CVE-2024-54525 [HIGH] CVE-2024-54525: watchOS11.2
Apple Security Update: About the security content of watchOS11.2
Product: watchOS11.2
CVE: CVE-2024-54525
Component: MobileBackup
Impact: Restoring a maliciously crafted backup file may lead to modification of protected system files
Description: A logic issue was addressed with improved file handling.
Apple
CVE-2024-54525: iOS18.2 and iPadOS18.2
vendor_apple·2024-12-11·CVSS 8.8
CVE-2024-54525 [HIGH] CVE-2024-54525: iOS18.2 and iPadOS18.2
Apple Security Update: About the security content of iOS18.2 and iPadOS18.2
Product: iOS18.2 and iPadOS18.2
CVE: CVE-2024-54525
Component: MobileBackup
Impact: Restoring a maliciously crafted backup file may lead to modification of protected system files
Description: A logic issue was addressed with improved file handling.
Apple
CVE-2024-54525: visionOS2.2
vendor_apple·2024-12-11·CVSS 8.8
CVE-2024-54525 [HIGH] CVE-2024-54525: visionOS2.2
Apple Security Update: About the security content of visionOS2.2
Product: visionOS2.2
CVE: CVE-2024-54525
Component: MobileBackup
Impact: Restoring a maliciously crafted backup file may lead to modification of protected system files
Description: A logic issue was addressed with improved file handling.
Apple
CVE-2024-54525: macOS Sequoia 15.2
vendor_apple·2024-12-11·CVSS 8.8
CVE-2024-54525 [HIGH] CVE-2024-54525: macOS Sequoia 15.2
Apple Security Update: About the security content of macOS Sequoia 15.2
Product: macOS Sequoia
Version: 15.2
CVE: CVE-2024-54525
Component: MobileBackup
Impact: Restoring a maliciously crafted backup file may lead to modification of protected system files
Description: A logic issue was addressed with improved file handling.
Apple
CVE-2024-54525: tvOS18.2
vendor_apple·2024-12-11·CVSS 8.8
CVE-2024-54525 [HIGH] CVE-2024-54525: tvOS18.2
Apple Security Update: About the security content of tvOS18.2
Product: tvOS18.2
CVE: CVE-2024-54525
Component: MobileBackup
Impact: Restoring a maliciously crafted backup file may lead to modification of protected system files
Description: A logic issue was addressed with improved file handling.
GHSA
GHSA-f9q9-85g5-cwgj: A logic issue was addressed with improved file handling
ghsa_unreviewed·2025-03-17
CVE-2024-54525 [HIGH] CWE-434 GHSA-f9q9-85g5-cwgj: A logic issue was addressed with improved file handling
A logic issue was addressed with improved file handling. This issue is fixed in visionOS 2.2, watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2. Restoring a maliciously crafted backup file may lead to modification of protected system files.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-03-17
Published