CVE-2024-54551

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing web content may lead to a denial-of-service.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://support.apple.com/en-us/120909	Release Notes Vendor Advisory
https://support.apple.com/en-us/120911	Release Notes Vendor Advisory
https://support.apple.com/en-us/120913	Release Notes Vendor Advisory
https://support.apple.com/en-us/120914	Release Notes Vendor Advisory
https://support.apple.com/en-us/120915	Release Notes Vendor Advisory
https://support.apple.com/en-us/120916	Release Notes Vendor Advisory
https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:apple:safari::::::::
	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:tvos::::::::
	cpe:2.3:o:apple:visionos::::::::
	cpe:2.3:o:apple:watchos::::::::

History

02 Apr 2026, 19:18

Type	Values Removed	Values Added
Summary	(en) The issue was addressed with improved memory handling. This issue is fixed in watchOS 10.6, tvOS 17.6, Safari 17.6, macOS Sonoma 14.6, visionOS 1.3, iOS 17.6 and iPadOS 17.6. Processing web content may lead to a denial-of-service.	(en) The issue was addressed with improved memory handling. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing web content may lead to a denial-of-service.

03 Nov 2025, 20:16

Type	Values Removed	Values Added
References		() https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html -

24 Mar 2025, 15:10

Type	Values Removed	Values Added
First Time		Apple iphone Os Apple tvos Apple watchos Apple ipados Apple visionos Apple macos Apple safari Apple
CPE		cpe:2.3:o:apple:iphone_os:::::::: cpe:2.3:a:apple:safari:::::::: cpe:2.3:o:apple:tvos:::::::: cpe:2.3:o:apple:ipados:::::::: cpe:2.3:o:apple:watchos:::::::: cpe:2.3:o:apple:macos:::::::: cpe:2.3:o:apple:visionos::::::::
References	~~() https://support.apple.com/en-us/120909 -~~	() https://support.apple.com/en-us/120909 - Release Notes, Vendor Advisory
References	~~() https://support.apple.com/en-us/120911 -~~	() https://support.apple.com/en-us/120911 - Release Notes, Vendor Advisory
References	~~() https://support.apple.com/en-us/120913 -~~	() https://support.apple.com/en-us/120913 - Release Notes, Vendor Advisory
References	~~() https://support.apple.com/en-us/120914 -~~	() https://support.apple.com/en-us/120914 - Release Notes, Vendor Advisory
References	~~() https://support.apple.com/en-us/120915 -~~	() https://support.apple.com/en-us/120915 - Release Notes, Vendor Advisory
References	~~() https://support.apple.com/en-us/120916 -~~	() https://support.apple.com/en-us/120916 - Release Notes, Vendor Advisory

21 Mar 2025, 17:15

Type	Values Removed	Values Added
Summary		(es) El problema se solucionó mejorando la gestión de la memoria. Este problema está corregido en watchOS 10.6, tvOS 17.6, Safari 17.6, macOS Sonoma 14.6, visionOS 1.3, iOS 17.6 y iPadOS 17.6. El procesamiento de contenido web puede provocar una denegación de servicio.
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.5
CWE		CWE-119

21 Mar 2025, 00:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-03-21 00:15

Updated : 2026-04-02 19:18

NVD link : CVE-2024-54551

Mitre link : CVE-2024-54551

CVE.ORG link : CVE-2024-54551

JSON object : View

Products Affected

apple

ipados
tvos
watchos
safari
visionos
macos
iphone_os

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

7.5 /10