Vulnerabilities

CVSS

7.8 High

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Risk score

62.4

Published

2024-12-12

Status

Modified

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.

Weaknesses

CWE-94

Coverage 1

vulnerability

Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529

Researchers at Google Project Zero discovered and exploited a type confusion vulnerability (CVE-2024-54529) within the coreaudiod system daemon in macOS. The vulnerability, stemming from a double-free, allowed for heap m…

Google Project Zero · Jan 30, 2026 Critical

CVE-2024-54529CVE-2025-31235macosvulnerabilityheap

All articles mentioning it

Advisories and references

• support.apple.com/en-us/121839
• support.apple.com/en-us/121840
• support.apple.com/en-us/121842
• seclists.org/fulldisclosure/2024/Dec/7
• seclists.org/fulldisclosure/2024/Dec/9