CVE-2024-54543

CVE-2024-54543 is a memory corruption vulnerability (CWE-787) addressed through improved memory handling in Apple Safari and associated operating systems. It affects versions of Safari prior to 18.2, iOS prior to 18.2 and iPadOS prior to 18.2 or 17.7.6, macOS Sequoia prior to 15.2, tvOS prior to 18.2, visionOS prior to 2.2, and watchOS prior to 11.2. The flaw is triggered by processing maliciously crafted web content, which can lead to memory corruption.

The vulnerability carries a CVSS v3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), indicating high severity with network accessibility, low attack complexity, no required privileges, and user interaction needed. Remote attackers can exploit it by tricking users into loading malicious web content, such as via a phishing link or compromised website. Successful exploitation may result in high-impact confidentiality, integrity, and availability violations, potentially enabling arbitrary code execution within the browser's sandbox.

Apple's security advisories, detailed at https://support.apple.com/en-us/121837, https://support.apple.com/en-us/121839, https://support.apple.com/en-us/121843, https://support.apple.com/en-us/121844, and https://support.apple.com/en-us/121845, confirm the issue was resolved in the specified versions. Mitigation requires updating affected devices to these patched releases as soon as possible.