CVE-2024-54468

Analysis

CVE-2024-54468 is a sandbox escape vulnerability affecting multiple Apple platforms. The issue exists in the macOS, iOS, iPadOS, tvOS, and watchOS operating systems. Apple's advisory confirms that an app may be able to break out of its sandbox, meaning a malicious or compromised application could bypass the system's security restrictions.[1][2]

Root

Cause and Impact

The root cause is addressed with improved checks, though the vendor has not publicly detailed the specific logic flaw. This vulnerability could allow an attacker to escape the application sandbox, potentially gaining unintended access to system resources, user data, or other apps. The impact is rated high with a CVSS v3 score of 8.2, indicating significant severity. The vulnerability is present across a wide range of hardware, including iPhone XS and later, multiple iPad models, and various Macs running the affected operating systems.[2][3]

Mitigation

Apple has released patches for this vulnerability in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, and watchOS 11.2. Users are strongly advised to update their devices to the latest available software versions to protect against potential exploitation. The issue was responsibly disclosed through Apple's security program.[1][4]