Apple Multiple Products Memory Corruption Vulnerability
Apple · Multiple Products
Date added (CISA)
2024-01-31
Remediation due
2024-02-21
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check/time-of-use (TOCTOU) memory corruption vulnerability that allows an attacker with read and write capabilities to bypass Pointer Authentication.