CVE-2024-54543

webkitgtk: Processing maliciously crafted web content may lead to memory corruption

Severity Score

8.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track*

*SSVC

Descriptions

The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.2, tvOS 18.2, Safari 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. Processing maliciously crafted web content may lead to memory corruption.

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling.

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:Track*

Exploitation

None

Automatable

Tech. Impact

Total

* Organization's Worst-case Scenario

Timeline

2024-12-03 CVE Reserved
2025-01-27 CVE Published
2025-02-05 CVE Updated
2025-04-01 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-787: Out-of-bounds Write

CAPEC

References (8)

URL	Tag	Source
https://support.apple.com/en-us/121837
https://support.apple.com/en-us/121839
https://support.apple.com/en-us/121843
https://support.apple.com/en-us/121844
https://support.apple.com/en-us/121845
https://support.apple.com/en-us/121846

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://access.redhat.com/security/cve/CVE-2024-54543	2025-03-03
https://bugzilla.redhat.com/show_bug.cgi?id=2344619	2025-03-03

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Apple Search vendor "Apple"		Ios Search vendor "Apple" for product "Ios"				*		-		Affected
Apple Search vendor "Apple"		Macos Search vendor "Apple" for product "Macos"				*		-		Affected
Apple Search vendor "Apple"		Safari Search vendor "Apple" for product "Safari"				*		-		Affected
Apple Search vendor "Apple"		Visionos Search vendor "Apple" for product "Visionos"				*		-		Affected
Apple Search vendor "Apple"		Watchos Search vendor "Apple" for product "Watchos"				*		-		Affected
Apple Search vendor "Apple"		Ipados Search vendor "Apple" for product "Ipados"				*		-		Affected
Apple Search vendor "Apple"		Iphone Os Search vendor "Apple" for product "Iphone Os"				*		-		Affected
Apple Search vendor "Apple"		Macos Search vendor "Apple" for product "Macos"				*		-		Affected
Apple Search vendor "Apple"		Tvos Search vendor "Apple" for product "Tvos"				*		-		Affected
Apple Search vendor "Apple"		Visionos Search vendor "Apple" for product "Visionos"				*		-		Affected
Apple Search vendor "Apple"		Watchos Search vendor "Apple" for product "Watchos"				*		-		Affected