Live › vulnerability › CVE-2024-23296
Go to dashboardA memory corruption flaw in RTKit, the real-time OS that runs on Apple's coprocessors, in iOS, iPadOS, macOS, tvOS and watchOS. An attacker who already has arbitrary kernel read and write can use it to bypass kernel memory protections.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Apple Multiple Products | vendor | – | – |
| apple ipados | vendor | < 16.7.8 | 16.7.8 |
| apple ipados | vendor | >= 17.0, < 17.4 | 17.4 |
| apple iphone os | vendor | < 16.7.8 | 16.7.8 |
| apple iphone os | vendor | >= 17.0, < 17.4 | 17.4 |
| apple macos | vendor | >= 12.0, < 12.7.6 | 12.7.6 |
| apple macos | vendor | >= 13.0, < 13.6.7 | 13.6.7 |
| apple macos | vendor | >= 14.0, < 14.4 | 14.4 |
| apple tvos | vendor | < 17.4 | 17.4 |
| apple visionos | vendor | < 1.1 | 1.1 |
| apple watchos | vendor | < 10.4 | 10.4 |
Unknown from the sources.
s required action is to apply Apples mitigations or stop using the affected products if none existEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.
This page as .md · .json · in your agent: get_signal("CVE-2024-23296")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.