CVE-2024-44144

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, tvOS 18, visionOS 2, watchOS 11. Processing a maliciously crafted file may lead to unexpected app termination.

• CWE-120
• CWE-120

• https://support.apple.com/en-us/121238Release Notes, Vendor Advisory
• https://support.apple.com/en-us/121240Release Notes, Vendor Advisory
• https://support.apple.com/en-us/121248Release Notes, Vendor Advisory
• https://support.apple.com/en-us/121249Release Notes, Vendor Advisory
• https://support.apple.com/en-us/121250Release Notes, Vendor Advisory
• https://support.apple.com/en-us/121567Release Notes, Vendor Advisory
• https://support.apple.com/en-us/121570Release Notes, Vendor Advisory
• http://seclists.org/fulldisclosure/2024/Oct/10
• http://seclists.org/fulldisclosure/2024/Oct/12

Published

Oct 28, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-44135A permissions issue was addressed with additional restrictio…5.5
• CVE-2024-44136This issue was addressed through improved state management. …4.6
• CVE-2024-44137The issue was addressed with improved checks. This issue is …4.6
• CVE-2024-44139The issue was addressed with improved checks. This issue is …2.4
• CVE-2024-44141The issue was addressed with improved checks. This issue is …6.8
• CVE-2024-44142The issue was addressed with improved bounds checks. This is…7.8
• CVE-2024-44145This issue was addressed through improved state management. …6.1
• CVE-2024-44146A logic issue was addressed with improved file handling. Thi…10
• CVE-2024-44147This issue was addressed through improved state management. …5.5
• CVE-2024-44148This issue was addressed with improved validation of file at…10
• CVE-2024-44149A permissions issue was addressed with additional restrictio…7.5
• CVE-2024-44151A permissions issue was addressed with additional restrictio…5.5