This vulnerability (CVE-2024-27848) in Apple iOS and iPadOS allows a local malicious application to escalate privileges to root due to inadequate permissions checking. The issue is classified under CWE-277 (Improper Privilege Management). Apple addressed the vulnerability by improving permissions checks in iOS 17.5 and iPadOS 17.5. The CVSS v3.1 vector indicates the attack requires local access with high attack complexity and no user interaction, but can lead to high impact on confidentiality, integrity, and availability. The vendor advisory explicitly states the issue is fixed in the mentioned OS versions.

A successful exploitation of this vulnerability could allow a malicious app to gain root privileges on affected devices, potentially leading to full system compromise including unauthorized access to sensitive data, modification of system files, and disruption of system availability. The CVSS score of 7.4 reflects a high severity impact on confidentiality, integrity, and availability. However, there are no reports of active exploitation in the wild at this time.

Apple has released official fixes for this vulnerability in iOS 17.5 and iPadOS 17.5. Users and administrators should ensure that devices are updated to these versions or later to remediate the issue. No additional mitigation steps are required beyond applying the official update as the vendor advisory confirms the issue is resolved.