{"id":"CVE-2024-54506","aliases":["EUVD-2024-52605","GHSA-7r2p-cp9x-c68f"],"status":"published","title":"An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...","description":"An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00695,"percentile":0.53422,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2024-12-11T22:57:49Z","modified":"2026-06-17T08:10:29Z","products":[{"vendor":"apple","product":"macos"}],"references":[{"url":"https://support.apple.com/en-us/121839","tags":["Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Dec/7"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54506"},{"url":"https://github.com/advisories/GHSA-7r2p-cp9x-c68f"}],"sources":{"cve":[{"id":"CVE-2024-54506","description":"An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware.","status":"published","published":"2024-12-11T22:57:49.318Z","modified":"2026-04-02T18:13:31.955Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:33:59.177173Z"}],"euvd":[{"id":"EUVD-2024-52605","description":"An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware.","status":"published","published":"2024-12-11T22:57:49Z","modified":"2026-04-02T18:13:31Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:25:20.863543Z"}],"ghsa":[{"id":"GHSA-7r2p-cp9x-c68f","title":"An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in...","description":"An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware.","status":"published","published":"2024-12-12T03:33:06Z","modified":"2025-11-04T00:32:15Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:04:31.19776Z"}],"nvd":[{"id":"CVE-2024-54506","description":"An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.2. An attacker may be able to cause unexpected system termination or arbitrary code execution in DCP firmware.","status":"published","published":"2024-12-12T02:15:31.31Z","modified":"2026-06-17T08:10:29.047Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:10:39.792395Z"}]}}