{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-44167","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","state":"PUBLISHED","assignerShortName":"apple","dateReserved":"2024-08-20T21:42:05.925Z","datePublished":"2024-09-16T23:22:25.822Z","dateUpdated":"2026-04-02T18:11:44.224Z"},"containers":{"cna":{"problemTypes":[{"descriptions":[{"lang":"en","description":"An app may be able to overwrite arbitrary files"}]}],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"0","status":"affected","lessThan":"18","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"0","status":"affected","lessThan":"13.7","versionType":"custom"},{"version":"0","status":"affected","lessThan":"14.7","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15","versionType":"custom"}]},{"vendor":"Apple","product":"visionOS","versions":[{"version":"0","status":"affected","lessThan":"2","versionType":"custom"}]}],"descriptions":[{"lang":"en","value":"This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. An app may be able to overwrite arbitrary files."}],"references":[{"url":"https://support.apple.com/en-us/121234"},{"url":"https://support.apple.com/en-us/121238"},{"url":"https://support.apple.com/en-us/121247"},{"url":"https://support.apple.com/en-us/121249"},{"url":"https://support.apple.com/en-us/121250"}],"providerMetadata":{"orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple","dateUpdated":"2026-04-02T18:11:44.224Z"}},"adp":[{"problemTypes":[{"descriptions":[{"type":"CWE","cweId":"CWE-22","lang":"en","description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}],"affected":[{"vendor":"mercurycom","product":"mac1200r_firmware","cpes":["cpe:2.3:o:mercurycom:mac1200r_firmware:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"13.7","versionType":"custom"},{"version":"0","status":"affected","lessThan":"14.7","versionType":"custom"},{"version":"0","status":"affected","lessThan":"15","versionType":"custom"}]},{"vendor":"apple","product":"visionos","cpes":["cpe:2.3:o:apple:visionos:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"2","versionType":"custom"}]},{"vendor":"apple","product":"ios_and_ipados","cpes":["cpe:2.3:o:apple:ios_and_ipados:*:*:*:*:*:*:*:*"],"defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"18","versionType":"custom"}]}],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-09-17T20:38:38.923198Z","id":"CVE-2024-44167","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2024-09-17T20:44:32.357Z"}},{"title":"CVE Program Container","references":[{"url":"http://seclists.org/fulldisclosure/2024/Sep/40"},{"url":"http://seclists.org/fulldisclosure/2024/Sep/36"},{"url":"http://seclists.org/fulldisclosure/2024/Sep/33"},{"url":"http://seclists.org/fulldisclosure/2024/Sep/41"},{"url":"http://seclists.org/fulldisclosure/2024/Sep/32"}],"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2025-11-04T16:14:47.533Z"}}]}}