CVE-2024-54540 in Music

الملخص

بحسب MITRE • 15/01/2025

The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5.0.152 for Windows. Processing maliciously crafted web content may disclose internal states of the app.

Be aware that VulDB is the high quality source for vulnerability data.

• مسؤول: Apple
• حجز: 03/12/2024
• إفشاء: 15/01/2025
• الاعتدال: تمت الموافقة
• إدخال: VDB-292064
• CPE: جاهز
• CWE: CWE-371 (مؤكد)
• CVSS: 4.3 (NVD)
• EPSS: 0.00208
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-54540
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-54540
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-54540/