CVE-2024-44162: High severity Apple Xcode vulnerability

Q: What is the severity of CVE-2024-44162?

CVE-2024-44162 has been classified as a moderate severity vulnerability.

Q: How do I fix CVE-2024-44162?

To mitigate CVE-2024-44162, ensure that you update to Apple Xcode version 16.0 or later.

Q: Which software is affected by CVE-2024-44162?

CVE-2024-44162 affects Apple Xcode versions prior to 16.0.

Q: What type of vulnerability is CVE-2024-44162?

CVE-2024-44162 is a vulnerability found in open source code affecting several Apple Software projects.

Q: When was CVE-2024-44162 disclosed?

CVE-2024-44162 was disclosed in 2024.

Published Sep 16, 2024

Updated

Git. This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.

Other sources

IDE Documentation. This issue was addressed by enabling hardened runtime.

— Apple

This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 16. A malicious application may gain access to a user's Keychain items.

— MITRE

Credit

CVE-2024-32002, Mickey Jin@@patch1t, Guilherme Rambo(Best Buddy Apps), Alexander Heinrich, SEEMOO, DistriNet, KU Leuven@@vanhoefm, TU Darmstadt@@Sn0wfreeze, Mathy Vanhoef, Wojciech Regula(SecuRing)

Affected Software

2 affected componentsFixes available

Apple Xcode<16

Apple Xcode<16.0

Event History

Sep 16, 2024

CVE Published

via MITRE·11:23 PM

Data Sourced

via MITRE·11:23 PM

DescriptionWeakness

Sep 17, 2024

Data Sourced

via NVD·12:15 AM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

APPLE-121239

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2024-44162?

CVE-2024-44162 has been classified as a moderate severity vulnerability.

How do I fix CVE-2024-44162?