CVE-2024-27856 is a code execution vulnerability in Apple Safari caused by insufficient validation when processing certain files. This flaw could lead to unexpected application termination or allow an attacker to execute arbitrary code with user privileges. The issue is classified under CWE-94 (Improper Control of Generation of Code). Apple has fixed the vulnerability by implementing improved checks in Safari 17.5 and related OS updates. The CVSS 3.1 base score is 7.8, reflecting local attack vector with low complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected device or cause the Safari application to crash unexpectedly. This could compromise user data confidentiality and integrity, and disrupt availability of the browser. The attack requires local access and user interaction, limiting remote exploitation scenarios. There are no known exploits in the wild currently.

Apple has released official fixes for this vulnerability in Safari 17.5 and corresponding OS updates including iOS 16.7.8, iOS 17.5, iPadOS 16.7.8, iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, and watchOS 10.5. Users and administrators should apply these updates promptly to mitigate the risk. Patch status is confirmed as fixed by Apple. No additional mitigation steps are indicated by the vendor advisory.