{"id":"CVE-2024-23225","kind":"vulnerability","aliases":["CVE-2024-23225"],"related":[],"title":"A memory corruption issue was addressed with improved validation","description":"A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.","summary":"A memory corruption flaw in the Apple kernel across iOS, iPadOS, macOS, tvOS, watchOS and visionOS lets code bypass kernel memory protections. It is listed as exploited in the wild, and the attacker needs arbitrary kernel read and write capability first.","severity":"high","cvss":7.8,"epss":null,"exploited":true,"exploited_at":"2024-03-06T00:00:00+00:00","products":[{"name":"Apple Multiple Products","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple ipados","fixed":["16.7.6"],"affected":"< 16.7.6","ecosystem":"vendor"},{"name":"apple ipados","fixed":["17.4"],"affected":">= 17.0, < 17.4","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["16.7.6"],"affected":"< 16.7.6","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["17.4"],"affected":">= 17.0, < 17.4","ecosystem":"vendor"},{"name":"apple macos","fixed":["12.7.4"],"affected":">= 12.0, < 12.7.4","ecosystem":"vendor"},{"name":"apple macos","fixed":["13.6.5"],"affected":">= 13.0, < 13.6.5","ecosystem":"vendor"},{"name":"apple macos","fixed":["14.4"],"affected":">= 14.0, < 14.4","ecosystem":"vendor"},{"name":"apple tvos","fixed":["17.4"],"affected":"< 17.4","ecosystem":"vendor"},{"name":"apple visionos","fixed":["1.1"],"affected":"< 1.1","ecosystem":"vendor"},{"name":"apple watchos","fixed":["10.4"],"affected":"< 10.4","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","infrastructure","ios","ipados","macos","tvos","visionos","watchos"],"not_affected_if":["fixed-os-version-installed"],"how_to_check":"Check the device OS version in Settings > General > About (iOS/iPadOS) or About This Mac (macOS) against Apple's security release notes for CVE-2024-23225.","fix":"Update to the Apple OS release that lists CVE-2024-23225 as fixed; the sources do not name the version.\nIf no update is available, follow the vendor mitigation instructions named in the CISA required action.","status":"open","published_at":"2024-03-05T20:16:01+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T21:00:57+00:00","updated_at":"2026-10-23T22:29:05+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-23T21:00:57Z","model":"claude-haiku-5-5","output":{"fix":"Update to the Apple OS release that lists CVE-2024-23225 as fixed; the sources do not name the version.\nIf no update is available, follow the vendor mitigation instructions named in the CISA required action.","reach":"local","impact":"high","summary":"A memory corruption flaw in the Apple kernel across iOS, iPadOS, macOS, tvOS, watchOS and visionOS lets code bypass kernel memory protections. It is listed as exploited in the wild, and the attacker needs arbitrary kernel read and write capability first.","category":"infrastructure","who_cares":["ios","ipados","macos","tvos","watchos","visionos"],"confidence":0.5,"needs_auth":"yes","worst_case":"Attacker with kernel read/write gains full control of the device kernel.","analyst_note":"Find the fixed OS versions and vendor mitigation steps in Apple's security advisory for CVE-2024-23225 (support.apple.com/en-us/HT214031 is the likely page; verify).","how_to_check":"Check the device OS version in Settings > General > About (iOS/iPadOS) or About This Mac (macOS) against Apple's security release notes for CVE-2024-23225.\nunknown\nunknown","needs_analyst":true,"not_affected_if":["fixed-os-version-installed"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000531,"input_tokens":2842,"output_tokens":493,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2024':11A,14A '-23225':12A,15A '1.1':126C '10.4':128C '12.7.4':116C '13.6.5':122C '14.4':119C '16.7.6':105C,108C '17.4':110C,113C,124C 'abl':140C 'across':57B 'address':6A,95C 'appl':55B,146C 'apple':16A,19A,21A,23A,26A,29A,31A,33A,35A,37A,39A 'arbitrari':83B,132C 'attack':81B,130C 'awar':148C 'bypass':67B,142C 'capabl':88B,137C 'code':66B 'corrupt':3A,51B,92C 'cve':10A,13A 'exploit':41B,75B,158C 'first':89B 'fix':102C 'flaw':52B 'improv':8A,97C 'infrastructur':42B 'io':43B,58B,104C,109C 'ipado':44B,59B,107C,112C 'ipados':20A,22A 'iphone':24A,27A 'issu':4A,93C,100C,154C 'kernel':56B,68B,84B,133C,143C 'let':65B 'list':73B 'maco':45B,60B,114C,117C,120C 'macos':30A,32A,34A 'may':138C,155C 'memori':2A,50B,69B,91C,144C 'monterey':115C 'multiple':17A 'need':82B 'os':25A,28A 'products':18A 'protect':70B,145C 'read':85B,134C 'report':151C 'sonoma':118C 'tvos':36A,46B,61B,123C 'valid':9A,98C 'ventura':121C 'visiono':47B,64B,125C 'visionos':38A 'watcho':48B,62B,127C 'watchos':40A 'wild':78B 'write':87B,136C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2024-03-05T20:16:01+00:00","kev":{"dateAdded":"2024-03-06","dueDate":"2024-03-27","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2024-23225","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23225","severity":null,"published_at":"2024-03-06T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T11:39:15+00:00","note":null},{"source":"nvd","external_id":"CVE-2024-23225","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23225","severity":null,"published_at":"2024-03-05T20:16:01+00:00","modified_at":"2026-06-17T07:12:20+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}