CVE-2024-27834: Input Validation
Published May 13, 2024
·Updated
An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Description: The issue was addressed with improved checks. WebKit Bugzilla: 272750 Versions affected: WebKitGTK and WPE WebKit before 2.44.2.
Credit
Minghao Lin(Baidu Security), (Baidu Security), Ye Zhang@@VAR10CK(Baidu Security), Meysam Firouzi@@R00tkitSMM, Mickey Jin@@patch1t, an anonymous researcher, Kirin@@Pwnrin, 小来来@@Smi1eSEC, pattern-f@@pattern_F_(Ant Security Light), Amir Bazine(CrowdStrike Counter Adversary Operations), Karsten König(CrowdStrike Counter Adversary Operations), Lucas Monteiro, Daniel Monteiro, Felipe Monteiro, Alexander Heinrich, SEEMOO, TU Darmstadt@@Sn0wfreeze, Shai Mishali@@freak4pc, CertiK SkyFall Team, Junsung Lee(Trend Micro Zero Day Initiative), Pan ZhenPeng@@Peterpan0927(STAR Labs SG Pte), an anonymous researcher(MIT CSAIL), (MIT CSAIL), Joseph Ravichandran@@0xjprx(MIT CSAIL), Pr(Bar), Pr(Hebrew University), EP, Nick Wellnhofer, Gil Pedersen, Dohyun Lee@@l33d0hyun, LFY@@secsys(Fudan University), Talal Haj Bakry(Mysk Inc), Tommy Mysk@@mysk_co(Mysk Inc), Daniel Zajork, Joshua Zajork, Meysam Firouzi@@R00tkitsmm(Trend Micro Zero Day Initiative), Michael DePlante@@izobashi(Trend Micro Zero Day Initiative), Andr.Ess, Adam Berry, Csaba Fitzl@@theevilbit(Kandji), LFY@@secsys, yulige, Snoolie Keffaber@@0xilis, Robert Reichel, Srijan Poudel, CVE-2024-27806, Abhay Kailasia@@abhay_kailasia(Lakshmi Narain College of Technology Bhopal), Romy R., ajajfxhj, Maksymilian Motyl(Immunity Systems), Manfred Paul@@_manfp(Trend Micro's Zero Day Initiative), Emilio Cobos(Mozilla), Lukas Bernhard(CISPA Helmholtz Center for Information Security), Manfred Paul@@_manfp(Trend Micro Zero Day Initiative), Nan Wang@@eternalsakura13(360 Vulnerability Research Institute), Joe Rutkowski@@Joe12387(Crawless), @@abrahamjuliot, Jeff Johnson(underpassapp), Dalibor Milanovic, Narendra Bhati(Suma Soft Pvt), Shaheen Fazim, CVE-2024-23296, Ron Masas(Imperva), Scott Johnson(RIPEDA Consulting), Mykola Grymalyuk(RIPEDA Consulting), Jordy Witteman, Carlos Polop, Pedro Tôrres@@t0rr3sp3dr0, Yann GASCUEL(Alter Solutions), Pwn2car(Trend Micro's Zero Day Initiative), (Trend Micro's Zero Day Initiative), Michael DePlante@@izobashi(Trend Micro's Zero Day Initiative)
Affected Software
25 affected componentsFixes available
ubuntu/webkit2gtk<2.44.2-0ubuntu0.22.04.1
2.44.2-0ubuntu0.22.04.1
ubuntu/webkit2gtk<2.44.2-0ubuntu0.23.10.1
2.44.2-0ubuntu0.23.10.1
ubuntu/webkit2gtk<2.44.2-0ubuntu0.24.04.1
2.44.2-0ubuntu0.24.04.1
ubuntu/webkit2gtk<2.44.2
2.44.2
debian/webkit2gtk<=2.36.4-1~deb10u1, <=2.38.6-0+deb10u1, <=2.42.2-1~deb11u1, <=2.42.2-1~deb12u1
2.44.2-1~deb11u12.44.2-1~deb12u12.44.2-1
debian/wpewebkit<=2.38.6-1~deb11u1, <=2.38.6-1
2.44.2-1
Apple macOS Sonoma<14.5
14.5
Apple tvOS<17.5
17.5
Apple WatchOS<10.5
10.5
Apple Safari<17.5
17.5
Apple iOS<17.5
17.5
Apple iPadOS<17.5
17.5
Apple iOS<16.7.8
16.7.8
Apple iPadOS<16.7.8
16.7.8
Apple Safari<17.5
Apple iPadOS<17.5
Apple iPhone OS<17.5
Apple macOS>=14.0<14.5
Apple tvOS<17.5
Apple WatchOS<10.5
WebKitGTK WebKitGTK<2.44.2
wpewebkit WPE WebKit<2.44.2
Fedoraproject Fedora=39
Fedoraproject Fedora=40
redhat/webkit<2.44.2
2.44.2
Event History
May 13, 2024
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Updated
via Apple·12:00 AM
DescriptionWeakness
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
DescriptionWeakness
May 14, 2024
Data Sourced
via NVD·03:13 PM
Description
Data Sourced
via NVD·03:13 PM
SeverityWeaknessAffected Software
News Published
via The Register·10:15 PM
News Published
via The Register·10:19 PM
May 22, 2024
Data Sourced
via Red Hat·11:22 AM
DescriptionSeverityAffected Software
Jun 1, 2024
Data Sourced
via Launchpad·02:45 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-27834?
CVE-2024-27834 has been evaluated as a significant vulnerability allowing potential bypass of Pointer Authentication.
2
How do I fix CVE-2024-27834?
To fix CVE-2024-27834, upgrade your software to the latest versions such as iOS 17.5, iPadOS 17.5, tvOS 17.5, macOS Sonoma 14.5, Safari 17.5, or the updated versions of WebKitGTK as specified.
3
Which platforms are affected by CVE-2024-27834?
CVE-2024-27834 affects various platforms including iOS, iPadOS, tvOS, watchOS, macOS, and specific versions of WebKitGTK.
4
What type of vulnerability is CVE-2024-27834?
CVE-2024-27834 is a vulnerability related to the potential bypass of Pointer Authentication through arbitrary read and write capabilities.
5
When was CVE-2024-27834 disclosed?
CVE-2024-27834 was disclosed alongside the release of fixes in 2024 for multiple Apple and WebKitGTK products.