Raw vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HSummary
CVE-2024-27828 is a high-severity Access of Memory Location Before Start of Buffer (CWE-786) vulnerability in Apple Ipados. Its CVSS base score is 7.8 (High).
Operationally, ranked at the 18th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-25021
Vulnerability Data
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to execute arbitrary code with kernel privileges.
- CWE(s)
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
Control response
—
—
—
V1.4.1
Mitigating Controls (NIST CSF 2.0) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.
Secure SDLC practices directly prevent buffer underflows via safe coding, bounds checks, and analysis, but eliminating only this CWE covers a narrow slice of the control's broader intent.
Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.
Security testing in development can detect and eliminate pre-buffer memory accesses before release.
Secure development lifecycle includes buffer-boundary checks that reduce out-of-bounds reads before buffer start.
Application security requirements can mandate bounds checking and pointer validation to prevent pre-buffer accesses.
Secure architecture principles promote safe memory handling and pointer arithmetic safeguards.
Secure coding standards directly require bounds checking and pointer validation that prevent this weakness.