Severity
Medium
Analysis Summary
CVE-2024-54517 CVSS:5.5
The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2 and iPadOS 18.2. An app may be able to corrupt coprocessor memory.
CVE-2025-24145 CVSS:5.5
Apple macOS Sequoia could allow a local attacker to view a contact's phone number in system logs, caused by a privacy issue in the Time Zone component when using a specially crafted application.
Impact
- Denial of Service
- Information Disclosure
Indicators of Compromise
CVE
CVE-2024-54517
CVE-2025-24145
Affected Vendors
- Apple
Affected Products
- Apple iPadOS - 18.2
- Apple iOS - 18.2
- Apple macOS Sequoia - 15.2
Remediation
Upgrade to the latest version, available from the Apple Website.