Vulnerabilities > CVE-2024-44157 - Out-of-bounds Write vulnerability in Apple TV and Itunes

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

apple

CWE-787

NVD

Published: 2024-10-11

Updated: 2024-12-12

Summary

A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 for Windows, iTunes 12.13.3 for Windows. Parsing a maliciously crafted video file may lead to unexpected system termination.

Vulnerable Configurations

Part	Description	Count
Application	Apple Apple Itunes 12.0.0 Apple Itunes 12.0.4 Apple Itunes 12.1.3 Apple Itunes 12.4.1 Apple Itunes 12.4.3 Apple Itunes 12.5.5 Apple Itunes 12.5.5.5 Apple Itunes 12.8 Apple Itunes 12.9 Apple Itunes 12.9.0 Apple Itunes 12.9.1 Apple Itunes 12.9.2 Apple Itunes 12.9.3 Apple Itunes 12.9.4 Apple Itunes 12.9.5 Apple Itunes 12.9.6 Apple Itunes 12.10.1 Apple Itunes 12.10.2 Apple Itunes 12.10.3 Apple Itunes 12.10.4 Apple Itunes 12.10.5 Apple Itunes 12.10.7 Apple Itunes 12.10.8 Apple Itunes 12.10.9 Apple Itunes 12.11 Apple Itunes 12.11.3 Apple Itunes 12.12.3 Apple Itunes 12.12.9 Apple Apple TV *	29

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References