CVE Radar Logo
CVERadar
CVE Radar Logo
CVERadar

CVE-2024-27829

Medium Severity
SVRS
36/100

CVSSv3
7.5/10

EPSS
0.00186/1

CVE-2024-27829 is a vulnerability in macOS Sonoma 14.5 that allows processing a file to cause unexpected application termination or arbitrary code execution. Fixed with improved memory handling, this flaw could be exploited to compromise a system. SOCRadar's Vulnerability Risk Score (SVRS) of 36 indicates a moderate risk, although the CVSS score is 7.5. While not critical according to the SVRS, arbitrary code execution makes this a significant threat needing attention. The vulnerability stems from improper memory handling (CWE-788), enabling attackers to potentially inject and run malicious code. The "In The Wild" tag suggests that exploitation is already occurring. Organizations should prioritize patching systems to mitigate the risk of system compromise.

In The Wild
CVSS:3.1
AV:N
AC:H
PR:N
UI:R
S:U
C:H
I:H
A:H
2024-05-13

2025-02-13
Eye Icon
SOCRadar
AI Insight

Description

CVE-2024-27829 is a vulnerability with a CVSS score of 0, indicating a low severity. However, SOCRadar's SVRS assigns it a score of 30, highlighting the potential for exploitation. This discrepancy stems from SOCRadar's integration of additional intelligence sources, including social media, news, and dark web data.

Key Insights

  • Active Exploitation: The vulnerability is actively exploited in the wild, posing an immediate threat to organizations.
  • Low CVSS Score: The CVSS score of 0 may underestimate the severity of the vulnerability, as it does not consider the broader context and intelligence gathered by SOCRadar.
  • SVRS Score of 30: The SVRS score of 30 indicates a moderate level of risk, warranting attention and prompt mitigation.
  • Threat Actors: Specific threat actors or APT groups exploiting this vulnerability have not been identified at this time.

Mitigation Strategies

  • Apply Software Updates: Install the latest software updates from the vendor to patch the vulnerability.
  • Enable Intrusion Detection Systems (IDS): Configure IDS to monitor for suspicious activity and alert on potential exploitation attempts.
  • Implement Network Segmentation: Divide the network into smaller segments to limit the spread of an attack if exploitation occurs.
  • Educate Users: Train users on cybersecurity best practices, such as avoiding suspicious links and attachments.

Additional Information

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence
Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.
CVE Details
Access comprehensive CVE information instantly
Real-time Tracking
Subscribe to CVEs and get instant updates
Exploit Analysis
Monitor related APT groups and threats
IOC Tracking
Analyze and track CVE-related IOCs

News

CVE-2024-27829 | Apple macOS up to 14.4 App memory corruption (HT214106)
vuldb.com2025-03-30
CVE-2024-27829 | Apple macOS up to 14.4 App memory corruption (HT214106) | A vulnerability was found in Apple macOS up to 14.4. It has been classified as critical. This affects an unknown part of the component App. The manipulation leads to memory corruption. This vulnerability is uniquely identified as CVE-2024-27829. It is possible to initiate the attack remotely. There is no exploit
vuldb.com
rss
forum
news
ZDI-24-1120: Apple macOS AppleVADriver Out-Of-Bounds Write Remote Code Execution Vulnerability
2024-08-08
ZDI-24-1120: Apple macOS AppleVADriver Out-Of-Bounds Write Remote Code Execution Vulnerability | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2024-27829.
cve-2024-27829
cves
information technology
apple
ZDI-24-1121: Apple macOS VideoToolbox Out-Of-Bounds Read Information Disclosure Vulnerability
2024-08-08
ZDI-24-1121: Apple macOS VideoToolbox Out-Of-Bounds Read Information Disclosure Vulnerability | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 4.3. The following CVEs are assigned: CVE-2024-27829.
cve-2024-27829
cves
information technology
apple
ZDI-24-1122: Apple macOS VideoToolbox Out-Of-Bounds Read Information Disclosure Vulnerability
2024-08-08
ZDI-24-1122: Apple macOS VideoToolbox Out-Of-Bounds Read Information Disclosure Vulnerability | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.1. The following CVEs are assigned: CVE-2024-27829.
zerodayinitiative.com
rss
forum
news
Apple Patches Everything. July 2024 Edition, (Tue, Jul 30th)
2024-07-30
Apple Patches Everything. July 2024 Edition, (Tue, Jul 30th) | Yesterday, Apple released patches across all of its operating systems. A standalone patch for Safari was released to address WebKit problems in older macOS versions. Apple does not provide CVSS scores or severity ratings. The ratings below are based on my reading of the impact. However, the information isn&#x27t always sufficient to accurately assign a rating.
Yesterday, Apple released patches across all of its operating systems. A standalone patch for Safari was released to address WebKit problems in older macOS
cve-2024-27847
cve-2024-23296
cve-2024-27830
cve-2024-27821
ZDI-24-965: Apple macOS VideoToolbox Out-Of-Bounds Write Remote Code Execution Vulnerability
2024-07-26
ZDI-24-965: Apple macOS VideoToolbox Out-Of-Bounds Write Remote Code Execution Vulnerability | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2024-27829.
zerodayinitiative.com
rss
forum
news
Apple Patches Everything: macOS, iOS, iPadOS, watchOS, tvOS updated., (Tue, May 14th)
2024-05-14
Apple Patches Everything: macOS, iOS, iPadOS, watchOS, tvOS updated., (Tue, May 14th) | Apple today released updates for its various operating systems. The updates cover iOS, iPadOS, macOS, watchOS and tvOS. A standalone update for Safari was released for older versions of macOS. One already exploited vulnerability, CVE-2024-23296 is patched for older versions of macOS and iOS. In March, Apple patched this vulnerability for more recent versions of iOS and macOS.
Apple today released updates for its various operating systems. The updates cover iOS, iPadOS, macOS, watchOS and tvOS
apt42
sans.edu
rss
forum

Social Media

[ZDI-24-1120|CVE-2024-27829] Apple macOS AppleVADriver Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 8.8; Credit: Michael DePlante (@izobashi) of Trend Micro's Zero Day Initiative) https://t.co/KbR1SVkx36
0
0
0
CVE-2024-27829 The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.5. Processing a file may lead to unexpected app termination or arbitrary… https://t.co/9RQg4HC1WR
0
0
0

Affected Software

No affected software found for this CVE

References

ReferenceLink
[email protected]https://support.apple.com/en-us/HT214106
[email protected]http://seclists.org/fulldisclosure/2024/May/12
[email protected]https://support.apple.com/en-us/HT214106
[email protected]https://support.apple.com/kb/HT214106

CWE Details

CWE IDCWE NameDescription
CWE-788Access of Memory Location After End of BufferThe software reads or writes to a buffer using an index or pointer that references a memory location after the end of the buffer.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence