Medium severity5.5NVD Advisory· Published Sep 17, 2024· Updated Apr 2, 2026

CVE-2024-27876

Description

A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files.

Affected products

Apple Inc./Ipados
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Range: <17.7
Apple Inc./Iphone Os
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <17.7
Apple Inc./macOS
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Range: >=13.0,<13.7
Apple Inc./Visionos
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
Range: <2.0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

support.apple.com/en-us/121234nvdVendor Advisory
support.apple.com/en-us/121238nvdVendor Advisory
support.apple.com/en-us/121246nvdVendor Advisory
support.apple.com/en-us/121247nvdVendor Advisory
support.apple.com/en-us/121249nvdVendor Advisory
support.apple.com/en-us/121250nvdVendor Advisory
seclists.org/fulldisclosure/2024/Sep/32nvd
seclists.org/fulldisclosure/2024/Sep/33nvd
seclists.org/fulldisclosure/2024/Sep/36nvd
seclists.org/fulldisclosure/2024/Sep/39nvd
seclists.org/fulldisclosure/2024/Sep/40nvd
seclists.org/fulldisclosure/2024/Sep/41nvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000