UNIX symbolic link following in macOS - CVE-2024-44273
Published: October 28, 2024
Vulnerability identifier: #VU99402
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-44273
CWE-ID: CWE-61
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a symlink following issue in CoreMedia Playback. A local application can create a specially crafted symbolic link to a critical file on the system and overwrite it with privileges of the application.
Successful exploitation of this vulnerability may result in privilege escalation.
Affected software
macOS
visionOS
watchOS
tvOS
iPadOS
Apple iOS
visionOS
watchOS
tvOS
iPadOS
Apple iOS
How to mitigate CVE-2024-44273
Install updates from vendor's website.
macOS - addressed in versions 14.7.1 23H222, 15.1 24B83
visionOS - update to 2.1
watchOS - update to 11.1
tvOS - update to 18.1
iPadOS - update to 18.1 22B83
Apple iOS - update to 18.1 22B83
visionOS - update to 2.1
watchOS - update to 11.1
tvOS - update to 18.1
iPadOS - update to 18.1 22B83
Apple iOS - update to 18.1 22B83