Analysis Summary

CVE-2024-54517 CVSS:5.5

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.2, watchOS 11.2, tvOS 18.2, iOS 18.2 and iPadOS 18.2. An app may be able to corrupt coprocessor memory.

CVE-2025-24145 CVSS:5.5

Apple macOS Sequoia could allow a local attacker to view a contact's phone number in system logs, caused by a privacy issue in the Time Zone component when using a specially crafted application.

Impact

• Denial of Service
• Information Disclosure

Indicators of Compromise

CVE

• CVE-2024-54517

• CVE-2025-24145

Affected Vendors

Remediation

Upgrade to the latest version, available from the Apple Website.

CVE-2024-54517

CVE-2025-24145