{"id":"CVE-2024-44299","aliases":["EUVD-2024-41216","GHSA-p98j-34x2-jg46"],"status":"published","title":"The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS...","description":"The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0047,"percentile":0.40965,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2024-12-11T22:59:20Z","modified":"2026-06-17T07:52:44Z","products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"}],"references":[{"url":"https://support.apple.com/en-us/121563","tags":["Vendor Advisory"]},{"url":"https://support.apple.com/en-us/121564"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44299"},{"url":"https://github.com/advisories/GHSA-p98j-34x2-jg46"}],"sources":{"cve":[{"id":"CVE-2024-44299","description":"The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware.","status":"published","published":"2024-12-11T22:59:20.804Z","modified":"2026-04-02T18:27:13.373Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:34:06.48311Z"}],"euvd":[{"id":"EUVD-2024-41216","description":"The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware.","status":"published","published":"2024-12-11T22:59:20Z","modified":"2026-04-02T18:27:13Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:25:17.32175Z"}],"ghsa":[{"id":"GHSA-p98j-34x2-jg46","title":"The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS...","description":"The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware.","status":"published","published":"2024-12-12T03:33:06Z","modified":"2026-04-02T21:33:09Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:07:07.867102Z"}],"nvd":[{"id":"CVE-2024-44299","description":"The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware.","status":"published","published":"2024-12-12T02:15:24.513Z","modified":"2026-06-17T07:52:44.31Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"updated_at":"2026-11-02T14:10:39.792395Z"}]}}