This vulnerability (CVE-2024-54508) involves Apple Safari improperly handling memory when processing specially crafted web content, which can lead to an unexpected process crash. The issue is categorized under CWE-125 (Out-of-bounds Read) and CWE-787 (Out-of-bounds Write). Apple fixed the vulnerability by improving memory handling in Safari 18.2 and related OS updates including iOS 18.2, iPadOS 18.2 and 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, and watchOS 11.2. The vulnerability allows remote attackers to cause a denial of service via a crafted web page, requiring user interaction to trigger.

Successful exploitation results in an unexpected process crash of Safari, causing denial of service. There is no indication of confidentiality or integrity impact. The vulnerability requires user interaction (e.g., visiting a malicious web page) and does not require privileges. No known active exploits have been reported.

Apple has released official fixes for this vulnerability in Safari 18.2 and corresponding OS updates (iOS 18.2, iPadOS 18.2 and 17.7.6, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2). Users and administrators should apply these updates to remediate the issue. No additional mitigation is required beyond applying the official patches.