VDB
GHSA-rq2m-fjrh-fqx7
GHSA-rq2m-fjrh-fqx7
PUBLISHED
CVSS 7.5 HIGH
Record from GitHub Advisory Database · Published December 12, 2024
The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to an unexpected process crash.
Risk scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Timeline
- Dec 12, 2024 CVE Published
- May 1, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-rq2m-fjrh-fqx7
vulnetix vdb fixes GHSA-rq2m-fjrh-fqx7
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-rq2m-fjrh-fqx7/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2024-54508 advisory
- http://seclists.org/fulldisclosure/2024/Dec/5 url
- http://seclists.org/fulldisclosure/2024/Dec/13 url
- http://seclists.org/fulldisclosure/2024/Dec/7 url
- http://seclists.org/fulldisclosure/2024/Dec/11 url
- https://support.apple.com/en-us/121845 advisory
- https://lists.debian.org/debian-lts-announce/2025/01/msg00002.html advisory
- https://support.apple.com/en-us/121837 advisory
- https://support.apple.com/en-us/121843 advisory
- https://support.apple.com/en-us/122372 advisory
- https://support.apple.com/en-us/121839 url
- https://support.apple.com/en-us/121844 url
- https://support.apple.com/en-us/121846 url
- http://seclists.org/fulldisclosure/2025/Apr/5 url