A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination.
The error consists of improper handling of shared resource state in a race condition situation, classified as CWE-362. An application can manipulate resource access timing so that two concurrent processes or threads enter into conflict, leading to an unstable state of the operating system. Apple resolved the issue through improved state handling mechanisms.
A malicious application installed on a device can cause unexpected, forced system termination, resulting in loss of availability and potential loss of unsaved data.
The system should be updated to macOS Sequoia 15.6, macOS Sonoma 14.7.7, or macOS Ventura 13.7.7, according to the manufacturer's information available at support.apple.com/en-us/124149, 124150, and 124151.
Apple macOS Sequoia in versions before 15.6, Apple macOS Sonoma in versions before 14.7.7, Apple macOS Ventura in versions before 13.7.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HApple macOS
OSApple< 13.7.714.0 – 14.7.7 (bez)15.0 – 15.6 (bez)
Related vulnerabilities
Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty
Apple iOS/iPadOS/macOS — out-of-bounds write przy przetwarzaniu obrazu
Apple: Obejście Pointer Authentication w iOS, macOS i innych platformach
Apple — memory corruption (RCE) w przetwarzaniu strumieni audio
Apple WebKit: out-of-bounds write umożliwiający ucieczkę z sandbox przeglądarki